viewaudit(8)

-cclasses

Selects records in indicated classes. classes is a comma-

 

separated list of audit classes. A class may be specified by

 

its numeric value or its name. The ACS_ prefix may be

 

omitted. For example, the class of audit related events can

 

be expressed as ACS_AUDIT, AUDIT or 16.

 

The following are valid classes:

 

all

Denotes all classes.

 

ACS_SYSTEM(1)

System-related events

 

ACS_WRITE(2)

Commands that can modify

 

 

a state

 

ACS_READ(4)

Commands that read a

 

 

current state

 

ACS_LOGIN(8)

Login-related events

 

ACS_AUDIT(16)

Audit-related events

 

ACS_DOMAIN(32)

Domain management–

 

 

related events

 

ACS_USER(64)

User management–related

 

 

events

 

ACS_PLATFORM(128)

Platform management–

 

 

related events

 

ACS_MODES(256)

Mode-related events

-Ddate-time

Selects records that occurred on a specific day (a 24-hour

 

period beginning at 00:00:00 of the day specified and

 

ending at 23:59:59). The day specified is in local time in the

 

following format: yyyymmddhhmmss (year,month,day,

 

hour,minute,second). The time portion of the argument, if

 

supplied, is ignored. Any records with timestamps during

 

that day are selected. If any hours, minutes, or seconds are

 

given, they are ignored. -Dcannot be used with -Aor -B.

-Eend-record

Selects the last record matching the selection criteria to

 

display.

 

412

XSCF Reference Manual • Last Revised June 2007