NAME
acctsuspend, acctresume — suspend and resume accounting when available disk space reaches threshold
VALUES
Default
acctsuspend:
2
acctresume:
4
Allowed values
acctresume:
0 - 101
acctsuspend:
0 - acctresume-1
Recommended values
acctsuspend:
2 - 6
acctresume:
4 - 10
(But more than acctsuspend)
DESCRIPTION
The
acctsuspend
and
acctresume
tunables control when auditing stops and
resumes due to disk space constraints.
When free disk space on the file system being used by audit reaches the
acctsuspend
percentage, auditing is suspended until such time as the free disk
space reaches the
acctresume
percentage.
Who Is Expected to Change This Tunable?
Anyone using auditing.
Restrictions on Changing
Changes to this tunable take effect at the next reboot.
When Should the Value of This Tunable Be Raised?
Increasing either variable should be considered when it is necessary to
maintain a higher percentage of free space on the audited filesystem.
What Are the Side Effects of Raising the Value of This Tunable?
The higher either value is, the less auditing data that is captured.
The further the values are separated, the greater the amount of potentially
lost audit data.
When Should the Value of This Tunable Be Lowered?
If additional disk space is needed for auditing data, and it cannot
be obtained by moving files off of the filesystem, then the value of
acctsuspend
should be lowered.
What Are the Side Effects of Lowering the Value of This Tunable?
Filesystem performance (writing auditing records) decreases as the filesystem
fills up.
In turn, this will decrease the overall performance of audited processes.
What Other Tunables Should Be Changed at the Same Time?
When changing either of these tunables, both should be considered.
WARNINGS
All HP-UX kernel tunable parameters are release specific.
This parameter may be removed or have its meaning changed in
future releases of HP-UX.
AUTHOR
acctsuspend
and
acctresume
were developed by HP.
Printable version
