Lengine cores when auditlog is held open by vi

  • 3826736
  • 14-Jul-2006
  • 26-Apr-2012

Environment

Novell Audit 1.0.3 Secure Logging Server
Novell Audit 2.0.0 Secure Logging Server
Novell Audit 2.0.1 Secure Logging Server
Solaris 9

Situation

Lengine creates a core file when logging to the flat file and vi has the file open.
Lengine crashes when vi has auditlog open using the flat file channel

Resolution

Do not use vi to edit and/or view live audit files, meaning that if lengine is actively writing to the flat file channel, do not use a text editor to view the file. Please use some other non-intrusive means to view the contents of the file, such as a"tail -f" or a grep statement. Or save your data to a database and run queries against the database using your standard database query tools.
The problem has been reported to Novell Engineering, but at this time, the problem is not duplicatible. If you are able to reproduce this problem, please send an email to patchfeedback@novell.com with the subject of "Lengine cores using vi" and submit your duplication steps.

Status

Reported to Engineering