showaudit(8)
System Administration 329
NAME showaudit - display the current auditing system state
SYNOPSIS showaudit
showaudit [all]
showaudit [-a users] [-c classes] [-e events] [-g] [-m] [-p] [-s] [-t]
showaudit -h
DESCRIPTION showaudit(8) displays the current state of system auditing. When invoked without
options showaudit displays whether the writing of audit records is enabled or
disabled.
Privileges You m ust h ave auditadm or auditop privileges to run this command.
Refer to setprivileges(8) for more information.