Document revision date: 19 July 1999

Displays the security auditing characteristics in effect on the system.

Requires the SECURITY privilege.

Format

SHOW AUDIT

Parameters

None.

Description

The SHOW AUDIT command displays the current state of security auditing for the system. The display can include the state of the audit journal, the characteristics of the audit server, and the events for which auditing is enabled. If no auditing has been enabled, the display reports that security alarms and audits are currently disabled.

SHOW AUDIT and SET AUDIT provide the principal management interface to the security auditing system.

Qualifiers

/ALL

Displays all available auditing information including the following:

• Location of the system security audit log file
• Security events enabled for auditing
• Location of the security archive file
• Audit server characteristics, such as the action taken if the audit server runs out of memory.

/ALARM

Displays the categories of events that are currently enabled; these events will generate messages on any operator's terminal accepting security class messages.

/ARCHIVE

Displays the name and location of the security archive file (if archiving is enabled).

/AUDIT

Displays the categories of events that are currently enabled to write messages to the system security audit log file.

/EXACT

Use with the /PAGE=SAVE and /SEARCH qualifiers to specify a search string that must match the search string exactly and must be enclosed with quotation marks (" ").

If you specify the /EXACT qualifier without the /SEARCH qualifier, exact search mode is enabled when you set the search string with the Find (E1) key.

/HIGHLIGHT[=keyword]

Use with the /PAGE=SAVE and /SEARCH qualifiers to specify the type of highlighting you want when a search string is found. When a string is found, the entire line is highlighted. You can use the following keywords: BOLD, BLINK, REVERSE, and UNDERLINE. BOLD is the default highlighting.

/JOURNAL

Displays characteristics of the system audit journal.

/OUTPUT[=filespec]

Controls where the output of the command is sent. If you do not enter the /OUTPUT qualifier or if you enter it without a file specification, the output is sent to the default output stream or device for the current process, which is identified by the logical name SYS$OUTPUT.

If you enter the /OUTPUT qualifier with a partial file specification (for example, only a directory name), SET AUDIT assigns the file name SHOW with the default file type of .LIS. The file specification cannot include the asterisk (*) and the percent sign (%) wildcard characters.

/PAGE[=keyword]

/NOPAGE (default)

Controls the display of information on the screen.

You can use the following keywords with the /PAGE qualifier:

CLEAR_SCREEN	Clears the screen before each page is displayed.
SCROLL	Displays information one line at a time.
SAVE[= n]	Enables screen navigation of information, where n is the number of pages to store.

The /PAGE=SAVE qualifier allows you to navigate through screens of information. The /PAGE=SAVE qualifier stores up to 5 screens of up to 255 columns of information. When you use the /PAGE=SAVE qualifier, you can use the following keys to navigate through the information:

Key Sequence	Description
Up arrow key, Ctrl/B	Scroll up one line.
Down arrow key	Scroll down one line.
Left arrow key	Scroll left one column.
Right arrow key	Scroll right one column.
Find (E1)	Specify a string to find when the information is displayed.
Insert Here (E2)	Scroll right one half screen.
Remove (E3)	Scroll left one half screen.
Select (E4)	Toggle 80/132 column mode.
Prev Screen (E5)	Get the previous page of information.
Next Screen (E6), Return, Enter, Space	Get the next page of information.
F10, Ctrl/Z	Exit. (Some utilities define these differently.)
Help (F15)	Display utility help text.
Do (F16)	Toggle the display to oldest/newest page.
Ctrl/W	Refresh the display.

The /PAGE qualifier is not compatible with the /OUTPUT qualifier.

/SEARCH="string"

Use with the /PAGE=SAVE qualifier to specify a string that you want to find in the information being displayed. Quotation marks are required for the /SEARCH qualifier, if you include spaces in the text string.

You can also dynamically change the search string by pressing the Find key (E1) while the information is being displayed. Quotation marks are not required for a dynamic search.

/SERVER

Displays audit server characteristics.

/WRAP

/NOWRAP (default)

Use with the /PAGE=SAVE qualifier to limit the number of columns to the width of the screen and to wrap lines that extend beyond the width of the screen to the next line.

The /NOWRAP qualifier extends lines beyond the width of the screen and can be seen when you use the scrolling (left and right) features provided by the /PAGE=SAVE qualifier.

Example

$ SHOW AUDIT/ALL
List of audit journals:
 Journal name:           SECURITY
 Journal owner:          (system audit journal)
 Destination:            SYS$COMMON:[SYSMGR]SECURITY.AUDIT$JOURNAL
 Monitoring:             enabled
   Warning thresholds,   Block count:    100   Duration:    2 00:00:00.0
   Action thresholds,    Block count:     25   Duration:    0 00:30:00.0
                 
Security auditing server characteristics:
 Database version:       4.4
 Backlog (total):        100, 200, 300
 Backlog (process):      5, 2
 Server processing intervals:
   Archive flush:        0 00:01:00:00
   Journal flush:        0 00:05:00:00
   Resource scan:        0 00:05:00:00
 Final resource action:  purge oldest audit events
Security archiving information:
 Archiving events:       none
 Archive destination:
System security alarms currently enabled for:
 ACL
 Authorization
 INSTALL
 Time
 Audit:      illformed
 Breakin:    dialup,local,remote,network,detached
 Login:      batch,dialup,local,remote,network,subprocess,detached
 Logfailure: batch,dialup,local,remote,network,subprocess,detached,server
System security audits currently enabled for:
 ACL
 Mount
 Authorization
 INSTALL
 Time
 Audit:      illformed
 Breakin:    dialup,local,remote,network,detached
 Login:      batch,dialup,local,remote,network,subprocess,detached,server
 Logfailure: batch,dialup,local,remote,network,subprocess,detached,server
 Logout:     batch,dialup,local,remote,network,subprocess,detached,server
 FILE access:
   Failure:  read,write,execute,delete,control
      

The SHOW AUDIT command in this example displays the auditing settings after a system installation.

Displays the message classes that are currently affected by the SET BROADCAST command.

Format

SHOW BROADCAST

Parameters

None.

Description

The SHOW BROADCAST command tells which classes of messages are being screened from your terminal by the SET BROADCAST command. If some messages are enabled by the SET BROADCAST command, but these messages will not be displayed because your terminal is set NO BROADCAST, an informational message is displayed.

Qualifier

/OUTPUT[=filespec]

/NOOUTPUT

Controls where the output of the command is sent. If you do not enter the qualifier, or if you enter the /OUTPUT qualifier without a file specification, the output is sent to the current process default output stream or device, identified by the logical name SYS$OUTPUT.

If you enter the /OUTPUT qualifier with a partial file specification (for example, specifying only a directory), SHOW is the default file name and LIS the default file type. The asterisk (*) and the percent sign (%) wildcard characters are not allowed.

If you enter the /NOOUTPUT qualifier, output is suppressed.

Examples

$ SET BROADCAST=ALL
$ SET TERMINAL/NOBROADCAST
$ SHOW BROADCAST
Broadcasts are enabled for all classes
Terminal is set "No Broadcast", no broadcast messages
will be displayed.
 
      

The display in this example shows that all message classes are enabled for broadcast, but that these messages will not be received because the terminal is set NO BROADCAST.

$ SHOW BROADCAST
Broadcasts are currently disabled for:
    MAIL
      

The SHOW BROADCAST display in this example indicates that SET BROADCAST=NOMAIL is in effect.

$ SET BROADCAST=(NOALL,USER1)
$ SET TERMINAL/NOBROADCAST
$ SHOW BROADCAST
Broadcasts are currently disabled for:
    GENERAL
    PHONE
    MAIL
    QUEUE
    SHUTDOWN
    URGENT
    DCL
    OPCOM
    USER2
    USER3
    USER4
    USER5
    USER6
    USER7
    USER8
    USER9
    USER10
    USER11
    USER12
    USER13
    USER14
    USER15
    USER16
Terminal is set "No Broadcast", no broadcast messages
will be displayed.
 
      

This example shows the display you see when messages from USER1 are enabled, but will not be received, because the terminal is set NO BROADCAST.

$ SET BROADCAST=NONE
$ SHOW BROADCAST
Broadcasts are disabled for all classes
 
      

This example shows the display you see when SET BROADCAST=NONE is in effect.

Invokes the Show Cluster utility to monitor and display cluster activity and performance.

For more information about the Show Cluster utility, refer to the OpenVMS System Management Utilities Reference Manual or online help.

Format

SHOW CLUSTER

Displays the current state of the processors in an OpenVMS system.

Format

SHOW CPU [cpu-id[,...]]

Parameter

cpu-id[,...]

Specifies a decimal value representing the identity of a processor in a OpenVMS multiprocessing system. On a VAX 6000 system or an Alpha 7000 system, the CPU ID is the backplane slot number of the processor.

Description

The SHOW CPU command displays information about the status, characteristics, and capabilities of the processors active in and available to an OpenVMS multiprocessing or single-CPU system.

You identify the processors to be displayed by using either the /ACTIVE qualifier, the /ALL qualifier, a CPU ID, or list of CPU IDs. If you specify none of these, the SHOW CPU command uses the /ALL qualifier by default.

You identify the type of information to be displayed by using the /BRIEF, /FULL, and /SUMMARY qualifiers. If you specify none of these qualifiers, the SHOW CPU command assumes the /BRIEF qualifier by default. However, if you likewise do not identify a processor or processors as the object of a command, the SHOW CPU command assumes a default of SHOW/ALL/SUMMARY.

The SHOW CPU/FULL command lists the current process on each configured processor without stopping other activity on the system. The current process may change while the data is displayed. As a result, there may be apparent inconsistencies in the display. For example, a process may be listed as the current process on more than one CPU.

Qualifiers

/ACTIVE

Selects as the subject of the display only those processors that are members of the system's active set.

/ALL

Selects all configured processors, active and inactive, as the subject of the display.

/BRIEF

Produces information from the summary display and also lists the current CPU state and current process (if any) for each processor in the configuration.

/FULL

Produces information from the summary display. The /FULL qualifier also lists the current CPU state, the current process (if any), the revision levels, and the capabilities for each configured processor. It indicates which processes can execute only on certain processors in the configuration. In addition, if one or more uniprocessing drivers are present in the system, the /FULL qualifier lists them by name.

The SHOW CPU/FULL command lists the current process on each configured processor without stopping other activity on the system. The current process may change while the data is displayed. As a result, there may be apparent inconsistencies in the display. For example, a process may be listed as the current process on more than one CPU.

This qualifier also displays whether the CPU is enabled or disabled for use as a Fast Path preferred CPU, then lists the Fast Path ports assigned to it, and shows whether or not the ports are user-assigned.

For more information about using Fast Path features to improve I/O performance, refer to the OpenVMS I/O User's Reference Manual.

/SUMMARY

Produces a display listing the processors in the OpenVMS multiprocessing or single-CPU system, indicating which is the primary processor, which processors are configured, and which processors are active. The /SUMMARY qualifier also indicates the minimum revision levels required for processors in the system, which OpenVMS synchronization image has been loaded into the operating system, and whether multiprocessing is enabled. If the presence of one or more uniprocessing drivers in the system prohibits the enabling of multiprocessing, the SHOW CPU command displays a warning message.

Examples

$ SHOW CPU
 
SOWHAT, A VAX 8800
Multiprocessing is ENABLED. Full checking synchronization image
  loaded.
Minimum multiprocessing revision levels: CPU = 0 uCODE = 0 UWCS = 0.
 
PRIMARY CPU = 01
Active CPUs:      00 01
Configured CPUs:  00 01
      

The SHOW CPU command in this example produces a configuration summary of all configured processors in the VAX 8800 system SOWHAT. The primary processor is CPU 01, and all configured processors are active.

$ SHOW CPU/BRIEF
 
SOWHAT, A VAX 8800
Multiprocessing is ENABLED. Full checking synchronization image
  loaded.
Minimum multiprocessing revision levels: CPU = 0 uCODE = 0 UWCS = 0.
 
PRIMARY CPU = 01
 
CPU 00 is in RUN state
Current Process: AIREGIN          PID = 4A8001E5
  
CPU 01 is in RUN state
Current Process: ***None***
      

The SHOW CPU/BRIEF command in this example produces a configuration summary of the VAX 8800 system SOWHAT and also indicates that its two processors are in the RUN state. Only CPU 00 has a current process.

$  SHOW CPU/FULL
  
COBRA7, a DEC 4000 Model 620
Multiprocessing is ENABLED. Streamlined synchronization image loaded.
Minimum multiprocessing revision levels: CPU = 1
System Page Size = 8192
System Revision Code =
System Serial Number =
Default CPU Capabilities:
        System:         QUORUM RUN
Default Process Capabilities:
        System:         QUORUM RUN
PRIMARY CPU = 00
CPU 00 is in RUN state
Current Process: *** None ***
Serial Number:  AY24870417
Revision:       A200
VAX floating point operations supported.
IEEE floating point operations and data types supported.
Processor is Primary Eligible.
PALCODE: Revision Code = 5.48
         PALcode Compatibility = 0
         Maximum Shared Processors = 2
         Memory Space:  Physical address = 00000000 00000000
                        Length = 0
         Scratch Space: Physical address = 00000000 00000000
                        Length = 0
Capabilities of this CPU:
        System:         PRIMARY QUORUM RUN
        User bitmask:   00000040
Processes which can only execute on this CPU:
        NETACP           PID = 0000008E  Reason: PRIMARY Capability
Enabled for use as a Fastpath Preferred CPU.
Fastpath ports assigned to this CPU:
        PNA0
        PNB0 (user assigned)
CPU 01 is in RUN state
Current Process: CPUSCHED        PID = 00000095
Serial Number:  AY24870406
Revision:       A200
VAX floating point operations supported.
IEEE floating point operations and data types supported.
PALCODE: Revision Code = 5.48
         PALcode Compatibility = 0
         Maximum Shared Processors = 2
         Memory Space:  Physical address = 00000000 00000000
                        Length = 0
         Scratch Space: Physical address = 00000000 00000000
                        Length = 0
Capabilities of this CPU:
        System:         QUORUM RUN
        User bitmask:   00000080
Processes which can only execute on this CPU:
        CPUSCHED        PID = 00000095  Reason: Affinitized to this CPU
                                        Reason: User capabilities - 00000080
Enabled for use as a Fastpath Preferred CPU.
Fastpath ports assigned to this CPU:
        PNC0
 
 
 
 
      

The SHOW CPU/FULL command in this example produces a configuration summary of the DEC 4000 Model 620 system COBRA7. Both processors are in the RUN state, but only CPU 1 has a current process (CPUSCHED). CPUSCHED runs on CPU 1 because it has affinity for that processor, and because only CPU 1 has process capability 8.

$ SHOW CPU/FULL
  
OLEO, A VAX 6000-420
Multiprocessing is DISABLED. MULTIPROCESSING Sysgen parameter = 02
Minimum multiprocessing revision levels -- CPU: 0 uCODE: 0 UWCS: 21.
PRIMARY CPU = 02
*** Loaded unmodified device drivers prevent multiprocessor operation.***
    RBDRIVER
 
CPU 02 is in RUN state
Current Process: Koko               PID = 2A6001E3
Revision levels: CPU: 0 uCODE: 0 UWCS: 0.
Capabilities of this CPU:
        PRIMARY   VECTOR RUN
Processes which can only execute on this CPU:
        CONFIGURE         PID = 2A40010B  Reason = PRIMARY Capability
                                          Reason = RUN Capability
CPU 07 is in INIT state
Current Process: *** None ***
Revision levels: CPU: 0 uCODE: 0 UWCS: 0.
Capabilities of this CPU:
    *** None ***
Processes which can only execute on this CPU:
    *** None ***
 
 
 
 
      

The SHOW CPU/FULL command in this example produces a configuration summary of the VAX 6000-420 system OLEO, indicating that only CPU 02, the primary CPU, is active and in the RUN state. It also shows that there is a uniprocessing driver loaded in the system, thus preventing the system from being enabled as a multiprocessor.

$ SHOW CPU/FULL
CPU type: DEC 7000 Model 620
Multiprocessing is ENABLED. Full checking synchronization image 
 loaded.
Minimum multiprocessing revision levels: CPU = 1
System Page Size = 8192
System Revision Code =     
System Serial Number = PROTO115  
Default CPU Capabilities:
        QUORUM RUN 
Default Process Capabilities:
        QUORUM RUN 
PRIMARY CPU = 00
CPU 00 is in RUN state
Current Process: *** None ***
Serial Number:  GROUCHO   
Revision:      
VAX floating point operations supported.
IEEE floating point operations and data types supported.
PALCODE: Revision Code = 5.37
         PALcode Compatibility = 2
         Maximum Shared Processors = 8
         Memory Space:  Physical address = 00000000 00000000
                        Length = 16
         Scratch Space: Physical address = 00000000 00020000
                        Length = 16
Capabilities of this CPU:
        PRIMARY QUORUM RUN 
Processes which can only execute on this CPU:
        CONFIGURE        PID = 00000104  Reason: PRIMARY Capability
Enabled for use as a Fastpath Preferred CPU.
Fastpath ports assigned to this CPU:
        PNA0
CPU 01 is in RUN state
Current Process: VMSADU          PID = 00000110
Serial Number:  HARPO   
Revision:      
VAX floating point operations supported.
IEEE floating point operations and data types supported.
PALCODE: Revision Code = 5.37
         PALcode Compatibility = 2
         Maximum Shared Processors = 8
         Memory Space:  Physical address = 00000000 00000000
                        Length = 16
         Scratch Space: Physical address = 00000000 00020000
                        Length = 16
Capabilities of this CPU:
        QUORUM RUN 
Processes which can only execute on this CPU:
        *** None ***
Enabled for use as a Fastpath Preferred CPU.
Fastpath ports assigned to this CPU:
        PNB0
 
      

The SHOW CPU/FULL command in this example produces a configuration summary of the Alpha 7000-620, showing both CPUs active and in the RUN state.

$ SHOW CPU/FULL 1
COBRA7, a DEC 4000 Model 620
Multiprocessing is ENABLED. Full checking synchronization image loaded.
Minimum multiprocessing revision levels: CPU = 1
System Page Size = 8192
System Revision Code =
System Serial Number =
Default CPU Capabilities:
        System:         QUORUM RUN
Default Process Capabilities:
        System:         QUORUM RUN
PRIMARY CPU = 00
CPU 01 is in RUN state
Current Process: SYSTEM          PID = 00000097
Serial Number:  AY24870406
Revision:       A200
VAX floating point operations supported.
IEEE floating point operations and data types supported.
PALCODE: Revision Code = 5.56-01
         PALcode Compatibility = 0
         Maximum Shared Processors = 2
         Memory Space:  Physical address = 00000000 00000000
                        Length = 0
         Scratch Space: Physical address = 00000000 00000000
                        Length = 0
Capabilities of this CPU:
        System:         QUORUM RUN
Processes which can only execute on this CPU:
        *** None ***
Disabled for use as a Fastpath Preferred CPU.
Fastpath ports assigned to this CPU:
        PNA0 (user assigned)
 
 
      

The port PNA0 was assigned to CPU 1 by a user when CPU 1 was enabled as a Fast Path preferred CPU. Subsequent to that operation, CPU 1's bit was cleared in the IO_PREFER_CPUS sysgen parameter. This disabled CPU 1 for use as a Fast Path preferred CPU. Normally this is a transient condition, as changing IO_PREFER_CPUS results in the FASTPATH_SERVER process redistributing the Fast Path ports across the set of usable CPUs.

However, if there is no FASTPATH_SERVER process, PNA0 remains assigned to this CPU until any of the following actions occur:

1. The user tries to move the port to another CPU by using the SET DEVICE/PREFERRED_CPU command, $QIO, or the $IO_FASTPATH system service.
2. The CPU is stopped.

	privacy and legal statement
9996PRO_062.HTML