Introduction
As at 1.12.8 we have removed the old functionality of "Create a Windows Audit Script" and replaced it with the Scripts endpoint. You can now create a script with all the options for any of the existing audit scripts - not just Windows. AIX, ESX, Linux, OSX and Windows are all covered.
How Does it Work?
We initially setup the default list of scripts with the default options. The list of script is viewable at /scripts. These default scripts cannot be deleted. You can create additional scripts for use by you as required. Your script will be based on one of the existing scripts and have custom options applied. The scripts can then be downloaded from the list page at menu -> Admin -> Scripts -> List Scripts.
Creating a Script
To make another script use the menu and go to menu -> Admin -> Scripts -> Create Script. Provide a name and optionally a description. Choose a type of script to base your custom script upon. Once you do this, the Options section will populate with the available configurable options. At present Windows and Linux scripts will have the "files" details injected. See details about files here - File Auditing.
Viewing Script Details
Go to menu -> Admin -> Scripts -> List Scripts.
You will see a list of available scripts. You can view a script by clicking on the it's ID (in green). You can also download, edit or delete the script (if delete is permitted).
Scripts are stored in the database in the "scripts" table. A typical entry will look as below.
id: 1
name: audit_aix.sh
options: {"submit_online":"y","create_file":"n","url":"http://open-audit/index.php/system/add_system","debugging":1}description: The default audit AIX config.
based_on: audit_aix.sh
hash:
edited_by: system
edited_date: 2016-06-01 00:00:00
API Access?