Getting events to show after changing options
Novell Cool Solutions: Question & Answer
Reader Rating 
Q:
I've installed the NSure Audit starter pack on NetWare 6.0 with SP5 and
configured everything according to TID10091433.
MySQL, lengine, auditds and auditnw all load without any errors (and
stay loaded), events are logged into the database according to settings on
server object and I can query the events. The only problems are that
Filesystems events (File open, create and directory remove etc.) don't log.
A:
You may need to stop and start (auditstp and auditagt) the platform
agent after changing the audit event options. Although the current docs read "You do not need to restart the logging server to effect changes to NSure Audit attributes in the NCP Server object", the platform agent and the Secure Logging Server still need to be restarted to re-read their configuration. So, I have always restarted the instrumentation when changing it.
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com