viewaudit(8)
System Administration 491
EXAMPLE 4 Displaying Audit Records for Successful Access
EXAMPLE 5 Displaying Audit Records Within a Range of Two Days
EXAMPLE 6 Displaying First 5 Records (of 4238) that Match a Date Range
XSCF> viewaudit -r success
file,1,2006-01-11 10:52:30.391 -05:00,20060111155230.0000000000.jupiter
header,37,1,login - telnet,jupiter,2006-01-11 11:31:09.659 -05:00
subject,1,jsmith,normal,ssh 45880 jupiter
command,showuser
platform access,granted
return,0
header,57,1,command - viewaudit,jupiter.company.com,2006-01-26
16:13:09.128 -05:00
subject,5,sue,normal,ssh 1282 saturn
command,viewaudit
platform access,granted
return,0
...
XSCF> viewaudit -A 20080108 -B +2d
file,1,2008-01-09 20:12:12.968 -08:00,20080110041212.0000000004.sca-m5k-0-0
file,1,2008-01-10 21:14:49.481 -08:00,terminated
file,1,2008-01-10 21:14:49.485 -08:00,20080111051449.0000000005.sca-m5k-0-0
XSCF> viewaudit -l -A 20070515 -B 20080110 -C -S 1 -E 5
file,1,2008-01-09 20:12:12.968 -08:00,20080110041212.0000000004.sca-m5k-0-0
header,63,1,command - setaudit,sca-m5k-0-0.sfbay.sun.com,2008-01-09
20:12:12.974 -08:00,s ubject,250,opl,normal,ssh 42759 san-e4900-
0.West.Sun.COM,command,setaudit,delete,platform access,granted,return,0
header,37,1,login - ssh,sca-m5k-0-0.sfbay.sun.com,2008-01-09 20:12:14.455 -
08:00,subject, 252,scfroot,normal,ssh 42761 san-e4900-0.West.Sun.COM
To Next Page
Loading...
