Environment
Novell Audit 1.0.3 Secure Logging Server
Novell Audit 2.0.0 Secure Logging Server
Novell Audit 2.0.1 Secure Logging Server
Solaris 9
Situation
Lengine creates a core file when logging to the flat file and
vi has the file open.
Lengine crashes when vi has auditlog open using the flat file
channel
Resolution
Do not use vi to edit and/or view live audit files, meaning
that if lengine is actively writing to the flat file channel, do
not use a text editor to view the file. Please use some other
non-intrusive means to view the contents of the file, such as a"tail -f" or a grep statement. Or save your data to a
database and run queries against the database using your standard
database query tools.
The problem has been reported to Novell Engineering, but at
this time, the problem is not duplicatible. If you are able
to reproduce this problem, please send an email to patchfeedback@novell.com
with the subject of "Lengine cores using vi" and submit your
duplication steps.