SU Plug-in - Technical Reference

Introduction

Geneos SU Plug-in monitors the SUlog, which records the attempts of users to perform the su command, on Solaris systems. The SU plug-in produces one view named SU.

Data View

The SU Data View shows a cumulative view of the SUlog.

su2

Headline legend

There are two metrics displayed in the headline above the SU Data View:

Name	Description
totalSuccessful	The total number of successful user switches.
totalFailed	The total number of failed user switches.

Table legend

The SU Data View displays data from the SUlog in the following format:

Column Name	Description
fromTo	The name of the user who switched to another user.
lastSuccess	The date of the last successful switch.
lastFail	The date of the last failed switch.
successfulAttempts	The total number of successful attempts made by that user.
failedAttempts	The total number of failed attempts made by that user.

Plug-in Configuration

Sampler configuration:

logPath: **/var/adm/sulog**
history: **30**

The following parameters can be configured for this plug-in:

logPath

Full path to the directory containing the SUlog.

Mandatory: No

Default: /var/adm/sulog

History

Entries older than the number days specified here will be filtered out.

Mandatory: No

Default: 365