Browse Prior Art Database

New Data Reduction and System Administration Method in Distributed Computing Environment Audit Service

IP.com Disclosure Number: IPCOM000119129D
Original Publication Date: 1997-Dec-01
Included in the Prior Art Database: 2005-Apr-01

Publishing Venue

IBM

Related People

Tran, TM: AUTHOR

Abstract

Disclosed is an extended set of Distributed Computing Environment (DCE) Audit Application Programming Interfaces (APIs). The set is divided into two categories: Data Reduction Administration and System Administration.

This text was extracted from an ASCII text file.
This is the abbreviated version, containing approximately 20% of the total text.

New Data Reduction and System Administration Method in Distributed
Computing Environment Audit Service

      Disclosed is an extended set of Distributed Computing
Environment (DCE) Audit Application Programming Interfaces (APIs).
The set is divided into two categories:  Data Reduction
Administration and  System Administration.

      The new set of DCE Audit APIs and their functions are addressed
in detail on the following pages:
  1.  Data Reduction Administration
      o  dce_aud_first()
      o  dce_aud_last()
      o  dce_aud_get_records()
      o  dce_aud_get_event()
      o  dce_aud_print_header_only()
      o  dce_aud_print_tail_only()
  2.  System Administration
      o  dce_aud_prev()
      o  dce_aud_clean()
      o  dce_aud_rename()
      o  dce_aud_save()
      o  dce_aud_collect()
  1.  dce_aud_first
      NAME
        dce_aud_first - Reads the first Audit record from a
           specified Audit Trail into a buffer.
        Used by the trail analysis and examination tools.
      SYNOPSIS
        #include <dce/audit.h>
        void dce_aud_first(
          dce_aud_trail_t at,
          unsigned16 format,
          dce_aud_rec_t *ard,
          unsigned32 *status);
      PARAMETERS
      Input
        AT       A pointer to the descriptor of an Trail file
                  previously opened for reading by the function
                  dce_aud_open().
        format Event's tail format used for the event_specific
                information.   This format can be configured by
                the user.  With this format version number, the
                servers  and audit analysis tools can
                can accommodate changes in the formats of the event
                specification information or use different formats
                dynamically.
        Output
        ARD    A pointer to the Audit Record Descriptor containing
                the returned record.
        status  The status code returned by this function.  This
                 status code indicates whether the routine was
                 completed successfully or not.  If the routine was
                 not completed successfully, the reason for the
                 failure is given.
  2.  dce_aud_last
      NAME
        dce_aud_last - Reads the last Audit record from a
                        specified Audit Trail into a buffer.
        Used by the trail analysis and examination tools.
      SYNOPSIS
        #include <dce/audit.h>
        void dce_aud_last(
       ...