viewaudit(8)

-cclasses

Selects records in indicated classes. classes is a comma-

 

separated list of audit classes. A class may be specified by

 

its numeric value or its name. The ACS_ prefix may be

 

omitted. For example, the class of audit related events can

 

be expressed as ACS_AUDIT, AUDIT or 2.

 

The following are valid classes:

 

all

Denotes all classes.

 

ACS_LOGIN(0)

Login-related events

 

ACS_CONFIG(1)

Configuration-related

 

 

events

 

ACS_AUDIT(2)

Audit-related events

 

ACS_DOMAIN(3)

Domain-related events

 

ACS_USER(4)

User management–related

 

 

events

 

ACS_STATUS(5)

Status inquiry–related

 

 

events

 

ACS_PLATFORM(6)

Platform management–

 

 

related events

 

ACS_SERVICE(7)

Service-related events

-Ddate-time

Selects records that occurred on a specific day (a 24-hour

 

period beginning at 00:00:00 of the day specified and

 

ending at 23:59:59). The day specified is in local time in

 

the following format: yyyymmddhhmmss (year,month,day,

 

hour,minute,second). The time portion of the argument, if

 

supplied, is ignored. Any records with timestamps

 

during that day are selected. If any hours, minutes, or

 

seconds are given, they are ignored. -Dcannot be used

 

with -Aor -B.

 

-eevents

Selects records of the indicated events. events is a comma-

 

separated list of audit events. An event may be specified

 

by its numeric value or its name. The AEV_ prefix may be

 

omitted. For example, the event for SSH login can be

 

expressed as AEV_LOGIN_SSH, LOGIN_SSH or 4.

 

See showaudit -e all

for a list of valid events.

-h

Displays usage statement.

 

 

When used with other options or operands, an error

 

occurs.

 

System Administration

391