You can configure the audit facility to use syslog to create audit events and then specify where the events are sent.
The configuration is specified in the audit.cfg file, which must be located in the Enterprise Developer bin directory %ProgramFiles(x86)%\Micro Focus\Enterprise Developer\bin (Windows) or $COBDIR/bin (UNIX). The configuration file follows the standard INI file format containing sections, properties and values.
The configuration file is read when the audit process is initialized. Changes made to the configuration file are not picked up by the audit process that is running. You must restart the audit process to reload a modified configuration file.
The following is an example of the audit.cfg configuration file:
[audit] ; The type of emitter used to output audit events. Valid values: syslog or oldaudit emitter=syslog ; This section is for configuring the syslog emitter [syslog] ; The hostname and port of the syslog collector, where the syslog packets are sent. ; The hostname may be a host name string, dotted IPv4 or hex IPv6 notation. hostname=127.0.0.1 port=1468 ; All configuration values for syslog below this point are optional. ; tzKnown: If the timezone of this machine is known, this value should be 1. If not, it should be zero. tzKnown=0 ; isSynced: If this machine's clock is synced to a known external source, this must be set to 1. Otherwise, it must be zero. isSynced=0 ; syncAccuracy: The accuracy to which the machine's clock is synced. This is an integer, in microseconds, that the machine's clock may be off. syncAccuracy=0 ; ip: The IP address of this machine. This may be a comma-delimited list, in the case of multi-homed devices. ip=192.168.0.1 ; Configure how long (in seconds) the syslog emitter should spend attempting to re-send data if a failure occurs. ; The application will continue retrying until a time (approximately) equal to this value has elapsed. maxRetryTime=30