NAME
audit_memory_usage — percentage of physical memory that can be used by audit subsystem
DESCRIPTION
The tunable
audit_memory_usage
defines the percentage of physical memory that can be used by audit records.
If the audit record memory usage exceeds the
audit_memory_usage
limit, the audit subsystem blocks the system call until
memory usage comes down inside the limit.
Who Is Expected to Change This Tunable?
Administrator with proper privileges can change the value of
audit_memory_usage.
Restrictions on Changing
This tunable value can be changed any time, as this is a dynamic tunable; but
its value can not be lowered below the memory currently used by
the audit subsystem for records.
When Should the Value of This Tunable Be Raised?
When the system to be audited is critical and generates many records.
What are the Side Effects of Raising the Value?
If the system is generating great number of records, and the value is
raised, then it can create a lot of unflushed memory and might slow
down the system.
When Should the Value of This Tunable Be Lowered?
When the audit subsystem is not generating many records.
What are the Side Effects of Lowering the Value?
If many audit records are generated, then the auditing subsystem might
block the system call.
What Other Tunable Values Should Be Changed at the Same Time?
None.
WARNINGS
All HP-UX kernel tunable parameters are release specific.
This parameter may be removed or have its meaning changed in
future releases of HP-UX.
Installation of optional kernel software, from HP or other vendors,
may cause changes to tunable parameter values.
After installation,
some tunable parameters may no longer be at the default or
recommended values.
For information about the effects of
installation on tunable values, consult the documentation
for the kernel software being installed.
For information about optional kernel software that was
factory installed on your system, see
HP-UX Release Notes
at
http://docs.hp.com.
AUTHOR
audit_memory_usage
was developed by HP.
Printable version
