The DCE Audit Service has three basic components:
· application programming interfaces (APIs)
Provide the functions that are used to detect and record critical events when the application server services a client. The application programmer uses these functions at code points in the application server program to actuate the recording of audit events.
Other APIs are also provided which can be used to create tools that examine and analyze the audit event records.
· audit daemon
Maintains the filters and the audit logs.
· audit management interface
Management interface to the audit daemon. Used by the administrator to specify how the audit daemon will filter the recording of audit events. This interface is available from the DCE control program.