viewaudit(8)

 

 

 

-iaudit-ids

Selects records of the indicated audit session identifier. If

 

 

 

you become interested in activity reflected in a particular

 

 

audit record, you might wish to view all the audit records

 

 

for that session. An audit-idis not persistent and can be

 

 

reassigned across reboots of the Service Processor. audit-

 

 

ids is a comma-separated list of audit session identifiers.

 

 

The audit-idis the number following the label subject in

 

 

an audit file.

 

 

For example, in the following listing, the audit-idis 1

 

 

(shown in boldface for emphasis).

 

 

subject,1,bob,normal,telnet 45880 jupiter

 

-l

Prints one line per record.

 

-m del

Uses del as the field delimiter instead of the default

 

 

delimiter, which is the comma. If del has special meaning

 

 

for the shell, it must be quoted. The maximum size of a

 

 

delimiter is three characters. The delimiter is not

 

 

meaningful and is not used with the -xoption.

 

-n

Specifies that UIDs and IP addresses should not be

 

 

converted to user names or host names.

 

-pprivilege-results

Select records according to the indicated privilege-results.

 

 

privilege-results is a comma-separated list. privilege-results

 

 

are: granted, denied, or error.

 

-rreturn-values

Selects records according to the indicated return values.

 

 

returnvals is a comma-separated list of the values:

 

 

success, or failure. success corresponds to a return

 

 

value of 0. failure corresponds to a nonzero return

 

 

value.

 

-uusers

Selects records attributed to indicated users. users is a

 

 

comma-separated list of users. A user can be specified by

 

 

user name or numeric UID.

 

-x

Prints in XML format.

EXAMPLES

EXAMPLE 1 Displaying Audit Records for December 12, 2005

 

XSCF> viewaudit -D 20051212

 

file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter

 

 

 

392

XSCF Reference Manual • Last Revised January 2007