[Info-vax] Move SECURITY.AUDIT$JOURNAL off the system disk?

[Jilly]

"Phillip Helbig---undress to reply" <helbig at astro.multiCLOTHESvax.de> wrote 
in message news:j1b9t1$vd6$1 at online.de...
> Is it possible to move SECURITY.AUDIT$JOURNAL off the system disk?  If
> so, a) is there any reason not to and b) where is this documented?
>

Easily merge the Audit Server output from all nodes in a cluster to a 
single, cluster-common SECURITY.AUDIT$JOURNAL file:

Run SET AUDIT/SERVER=EXIT on all nodes to stop the AUDIT_SERVER processes. 
SYSMAN can be used for this.

Copy the SYS$COMMON:[SYSMGR]VMS$AUDIT_SERVER.DAT from one of the nodes to 
the cluster-common location. The cluster-common location should be on a disk 
to which all nodes have access and, for better performance, a disk that is 
not being used as a system disk, a page/swap disk, or a quorum disk.

Copy the SYS$COMMON:[SYSMGR]SECURITY.AUDIT$JOURNAL from one of the nodes to 
the cluster-common location.

Modify SYS$COMMON:[SYSMGR]SYSECURITY.COM on all system disks to:

Mount the disk containing the cluster-common location.

DEFINE/SYSTEM/EXECUTIVE_MODE VMS$AUDIT_SERVER - 
cluster-common_location:VMS$AUDIT_SERVER.DAT

Run the @SYS$MANAGER:SYSECURITY.COM on all nodes.

Use SYSMAN for this. The disk containing the cluster-common location is 
already mounted, of course, but this is a good way to test the changes to 
the SYSECURITY.COM files on the system disks. Ignore any informational or 
warning messages. What is critical is that the logical VMS$AUDIT_SERVER is 
defined the same way on all nodes. To double-check, run the command SHOW 
LOGICAL VMS$AUDIT_SERVER on each node.

On a single node, run @SYS$SYSTEM:STARTUP AUDIT_SERVER to restart the Audit 
Server on that node.

SET AUDIT/JOURNAL=SECURITY

/DESTINATION=cluster-common_location:SECURITY.AUDIT$JOURNAL

This command modifies cluster-common_location:VMS$AUDIT_SERVER.DAT so that 
it directs output from the audit server to the file 
cluster-common_location:SECURITY.AUDIT$JOURNAL.

SET AUDIT/SERVER=NEW_LOG (This step is optional. It creates a new version of 
the log file to replace the one you originally copied to the cluster-common 
location.)

Run @SYS$SYSTEM:STARTUP AUDIT_SERVER on the remaining nodes.