nbaudit log behavior
The nbaudit log is found in the following location:
On Windows:
Install_path\Veritas\NetBackup\logs\nbaudit
On UNIX:
/usr/openv/logs/nbaudit
If auditing is enabled but a user action fails to create an audit record, the audit failure is captured in the nbaudit log.
The Alert Notification button in the NetBackup Administration Console can notify administrators when an audit failure occurs.
The nbaudit service behaves in the following manner when it creates audit records:
The audit record limits the details of an entry to a maximum of 4096 characters. (For example, the Policy name.) The remaining characters are truncated while stored in the audit database.
The audit record limits the restore image IDs to a maximum of 1024 characters. The remaining characters are truncated while stored in the audit database.
Rollback operations are not audited.
Some operations are carried out as multiple steps. For example, creating an MSDP-based storage server consists of multiple steps. Every successful step is audited. Failure in any of the steps results in a rollback, or rather, the successful steps may need to be undone. The audit record does not contain details about rollback operations.