Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-4108: How to reduce the logging of INFO AUDIT_TRAIL?

Centrify DirectControl ,  

12 April,16 at 11:07 AM

Question:
How does one reduce the logging of INFO AUDIT_TRAIL messages as shown in the below snippet?

Jan 22 14:53:48 br3-sdv-stc adclient[31876]: INFO AUDIT_TRAIL|Centrify Suite|PAM|1.0|600|PAM close session granted|5|user=ebhuiyan(type:ad,ebhuiyan@ezdomain.com) pid=11214 utc=1390420428846 status=GRANTED service=su-l

[root@br3-sdv-stc ~]# grep log: /etc/centrifydc/centrifydc.conf
log: WARN
# adclient.clients.listen.backlog: 50


Answer:
Check whether the following parameter is present in "/etc/centrifydc/centrifydc.conf" file:

"log.client.audittrail"

Note: log.client.audittrail has been hidden in centrifydc.conf with the latest build 5.1.2-372.

1.Set the parameter manually with

log.client.audittrail: WARN in centrifydc.conf, then run adreload.


This will reduce the messages.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.