zos-remote.conf(5) — Linux manual page


ZOS-REMOTE.CONF(5)     System Administration Utilities    ZOS-REMOTE.CONF(5)

NAME         top

       zos-remote.conf - the audisp-racf plugin configuration file

DESCRIPTION         top

       zos-remote.conf controls the configuration for the
       audispd-zos-remote(8) Audit dispatcher plugin. The default location
       for this file is /etc/audisp/zos-remote.conf, however, a different
       file can be specified as the first argument to the audispd-zos-remote
       plugin. See audispd-zos-remote(8) and auditd(8).  The options
       available are as follows:

       server This is the IBM z/OS ITDS server hostname or IP address

       port   The port number where ITDS is running on the z/OS server.
              Default is 389 (ldap port)

       user   The z/OS RACF user ID which the audispd-zos-remote plugin will
              use to perform Remote Audit requests. This user needs READ
              access to FACILITY Class resource IRR.LDAP.REMOTE.AUDIT (See

              The password associated the the z/OS user ID configured above.

              The number in seconds that audispd-zos-remote plugin will wait
              before giving up in connection attempts and event submissions.
              The default value is 15

              The audispd-zos-remote plugin will queue inputed events to the
              maximum of q_depth events while trying to submit those
              remotely. This can handle burst of events or in case of a slow
              network connection. However, the audispd-zos-remote plugin
              will drop events in case the queue is full. The default queue
              depth is 64 - Increase this value in case you are experiencing
              event drop due to full queue (audispd-zos-remote will log this
              to syslog).

SEE ALSO         top


AUTHOR         top

       Klaus Heinrich Kiwi <klausk@br.ibm.com>

COLOPHON         top

       This page is part of the audit (Linux Audit) project.  Information
       about the project can be found at 
       ⟨http://people.redhat.com/sgrubb/audit/⟩.  If you have a bug report
       for this manual page, send it to linux-audit@redhat.com.  This page
       was obtained from the project's upstream Git repository
       ⟨https://github.com/linux-audit/audit-userspace.git⟩ on 2020-06-09.
       (At that time, the date of the most recent commit that was found in
       the repository was 2020-05-25.)  If you discover any rendering prob‐
       lems in this HTML version of the page, or you believe there is a bet‐
       ter or more up-to-date source for the page, or you have corrections
       or improvements to the information in this COLOPHON (which is not
       part of the original manual page), send a mail to man-pages@man7.org

IBM                               Oct 2007                ZOS-REMOTE.CONF(5)

Pages that refer to this page: audispd-zos-remote(8)