viewaudit(8)

 

 

 

-uusers

Selects records attributed to indicated users. users is a

 

 

comma-separated list of users. A user can be specified by

 

 

user name or numeric UID.

 

-x

Prints in XML format.

EXAMPLES

EXAMPLE 1

Displaying Audit Records for December 12, 2005

 

XSCF> viewaudit -D 20051212

 

file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter

 

EXAMPLE 2 Displaying User Audit Records

 

XSCF> viewaudit -u jsmith

 

file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter

 

header,37,1,login - telnet,jupiter,2006-01-11 11:31:09.659 -05:00

 

subject,1,jsmith,normal,ssh 45880 jupiter

 

command,showuser

 

platform access,granted

 

return,0

 

EXAMPLE 3 Displaying Audit Records for Privileges

XSCF> viewaudit -p granted

file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter header,37,1,login - telnet,jupiter,2006-01-11 11:31:09.659 -05:00 subject,1,jsmith,normal,ssh 45880 jupiter

command,showuser platform access,granted return,0

EXAMPLE 4 Displaying Audit Records for Successful Access

XSCF> viewaudit -r success

file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter header,37,1,login - telnet,jupiter,2006-01-11 11:31:09.659 -05:00 subject,1,jsmith,normal,ssh 45880 jupiter

command,showuser platform access,granted return,0

header,57,1,command - viewaudit,jupiter.company.com,2006-01-26 16:13:09.128 -05:00

subject,5,sue,normal,ssh 1282 saturn command,viewaudit

platform access,granted return,0

...

414

XSCF Reference Manual • Last Revised June 2007