[Info-vax] Move SECURITY.AUDIT$JOURNAL off the system disk?

[Jilly]

"Phillip Helbig---undress to reply" <helbig at astro.multiCLOTHESvax.de> wrote 
in message news:j1eir2$5td$2 at online.de...
> In article <j1egb0$4bq$1 at online.de>, helbig at astro.multiCLOTHESvax.de
> (Phillip Helbig---undress to reply) writes:
>
>> SET AUDIT/JOURNAL=SECURITY
>>
>> /DESTINATION=cluster-common_location:SECURITY.AUDIT$JOURNAL
>>
>> This command modifies cluster-common_location:VMS$AUDIT_SERVER.DAT so 
>> that
>> it directs output from the audit server to the file
>> cluster-common_location:SECURITY.AUDIT$JOURNAL.
>
> $! SYS$COMMON:[SYSMGR]SYSECURITY.COM
> $! This command procedure is run prior to starting up the security 
> auditing
> $! server process.  Its purpose is to mount or define any disks which will 
> be
> $! used to hold security auditing log files (primarily the system security
> $! audit journal file) or local security archive files.
> $!
> $! SET AUDIT/JOURNAL/DESTINATION=filespec
> $! execute a cluster-common file
> $! disk is already mounted in procedure called from SYLOGICALS.COM
> $  FILE := CLUSTER_MANAGER:SYSECURITY.COM
> $  IF F$SEARCH(FILE) .NES. "" THEN @ CLUSTER_MANAGER:SYSECURITY.COM
> $  SET 
> AUDIT/JOURNAL=SECURITY/DESTINATION=CLUSTER_MANAGER:SECURITY.AUDIT$JOURNAL
> %SET-F-NOCTRLMBX, audit server control mailbox assignment failed
> -SYSTEM-F-IVDEVNAM, invalid device name
>
> NOCTRLMBX,  audit server control mailbox assignment failed
>
>  Facility:     SET, SET Command and SET Utility
>
>  Explanation:  The SET AUDIT command cannot complete because the system
>                cannot assign a channel to the audit server control 
> mailbox.
>
>  User Action:  Contact an HP support representative.
>
> $ typ CLUSTER_MANAGER:SYSECURITY.COM
> $  SET 
> AUDIT/JOURNAL=SECURITY/DESTINATION=CLUSTER_MANAGER:SECURITY.AUDIT$JOURNAL
> $  EXIT
>
> $ sh log/ful/all CLUSTER_MANAGER
>   "CLUSTER_MANAGER" [exec] = "CLUSTER_DISK:[SYSTEM.MANAGER]" 
> (LNM$SYSTEM_TABLE)
> $ sh log/ful/all CLUSTER_DISK
>   "CLUSTER_DISK" [exec] = "DISK$USER:" (LNM$SYSTEM_TABLE)
> 1  "DISK$USER" [exec] = "DSA510:" [concealed,terminal] (LNM$SYSTEM_TABLE)
>
> What am I missing?
>

Restart the AUDIT_SERVER before executing the SET AUDIT command
 @SYS$SYSTEM:STARTUP AUDIT_SERVER