viewaudit(8)
414 XSCF Reference Manual • Last Revised June 2007
EXAMPLES EXAMPLE 1 Displaying Audit Records for December 12, 2005
EXAMPLE 2 Displaying User Audit Records
EXAMPLE 3 Displaying Audit Records for Privileges
EXAMPLE 4 Displaying Audit Records for Successful Access
-u users Selects records attributed to indicated users. users is a
comma-separated list of users. A user can be specified by
user name or numeric UID.
-x Prints in XML format.
XSCF> viewaudit -D 20051212
file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter
XSCF>
viewaudit -u jsmith
file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter
header,37,1,login - telnet,jupiter,2006-01-11 11:31:09.659 -05:00
subject,1,jsmith,normal,ssh 45880 jupiter
command,showuser
platform access,granted
return,0
XSCF> viewaudit -p granted
file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter
header,37,1,login - telnet,jupiter,2006-01-11 11:31:09.659 -05:00
subject,1,jsmith,normal,ssh 45880 jupiter
command,showuser
platform access,granted
return,0
XSCF> viewaudit -r success
file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter
header,37,1,login - telnet,jupiter,2006-01-11 11:31:09.659 -05:00
subject,1,jsmith,normal,ssh 45880 jupiter
command,showuser
platform access,granted
return,0
header,57,1,command - viewaudit,jupiter.company.com,2006-01-26
16:13:09.128 -05:00
subject,5,sue,normal,ssh 1282 saturn
command,viewaudit
platform access,granted
return,0
...
