Creating a cron job

Cron is a Solaris daemon utility that automates scripts and commands to run system-wide on a scheduled basis.

About this task

The following steps provide an example for automating newauditlog.sh to run daily at midnight. If you need to retrieve log files multiple times a day from your Solaris system, you must alter your cron schedule.

Procedure

  1. Type the following command to create a copy of your cron file:

    crontab -l > cronfile

  2. Type the following command to edit the cronfile:

    vi cronfile

  3. Add the following information to your cronfile:

    0 0 * * * /etc/security/newauditlog.sh

  4. Save the change to the cronfile.
  5. Type the following command to add the cronfile to crontab:

    crontab cronfile

  6. You can now configure the log source in IBM QRadar to retrieve the Sun Solaris BSM audit log files.

What to do next

You are now ready to configure a log source in QRadar.