Previous Topic Next topic Print topic


mfaudit.emitter.emitter-name

Syntax:

mfaudit.emitter.emitter-name=program-name

Parameters:

emitter-name The name of the emitter being defined. This name can be specified in mfaudit.dest entries elsewhere in the configuration file.

Emitter names are case-insensitive.

program-name The name of the program that implements the emitter interface and that will be invoked by the audit facility when outputting events to the destination named by emitter-name.

Default:

Not applicable.

Comments:

mfaudit.emitter is used to define a user-specific emitter. Multiple mfaudit.emitter definitions may occur in the configuration file, but an entry which specifies an emitter-name that has previously been defined will replace the previous definition.

mfaudit.emitter may also be used to override a well-known emitter (e.g. AUDITFILE) implementation.

We recommend that any custom emitters that you use should be written in C. They should not be written in COBOL due to potential recursion issues during CTF tracing.

Examples:

1) Define a user-specific emitter named MYAUDIT and make it a default audit emitter.

...
mfaudit.emitter.MYAUDIT=myauditemitter.dll
mfaudit.dest=MYAUDIT
...

2) Replace the well-known AUDITFILE emitter.

...
mfaudit.emitter.AUDITFILE=myauditfileemitter.so
...
Previous Topic Next topic Print topic