Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add artifacts around Solaris system accounting #284

Merged
merged 4 commits into from
Oct 10, 2024

Conversation

sec-hbaer
Copy link
Contributor

Hi,

I've added some artifacts around system accounting on Solaris. All the referenced data is deactivated by default. But if available, it seems useful to investigate activity on the system.

The additions cover following points

  • default file location for the "normal" system accounting files (covers processes)
  • default file location for the "extended" system accounting files (covers processes, tasks, data link usage and IPQoS info, each in separate files and with separate settings)
  • live response to get the configuration of extended system accounting (both where the files are stored and what data is tracked)
  • live response to parse data from the normal system accounting files and the extended system accounting files using builtin tools

If you want an example collection with the data, I would be happy to share one. :)

Kind Regards

@tclahr tclahr merged commit 802ef78 into tclahr:develop Oct 10, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants