Filter
Top Products
viewaudit(8)
System Administration 391
-c classes Selects records in indicated classes. classes is a comma-
separated list of audit classes. A class may be specified by
its numeric value or its name. The ACS_ prefix may be
omitted. For example, the class of audit related events can
be expressed as ACS_AUDIT, AUDIT or 2.
The following are valid classes:
all Denotes all classes.
ACS_LOGIN(0) Login-related events
ACS_CONFIG(1) Configuration-related
events
ACS_AUDIT(2) Audit-related events
ACS_DOMAIN(3) Domain-related events
ACS_USER(4) User management–related
events
ACS_STATUS(5) Status inquiry–related
events
ACS_PLATFORM(6) Platform management–
related events
ACS_SERVICE(7) Service-related events
-D date-time Selects records that occurred on a specific day (a 24-hour
period beginning at 00:00:00 of the day specified and
ending at 23:59:59). The day specified is in local time in
the following format: yyyymmddhhmmss (year,month,day,
hour,minute,second). The time portion of the argument, if
supplied, is ignored. Any records with timestamps
during that day are selected. If any hours, minutes, or
seconds are given, they are ignored. -D cannot be used
with -A or -B.
-e events Selects records of the indicated events. events is a comma-
separated list of audit events. An event may be specified
by its numeric value or its name. The AEV_ prefix may be
omitted. For example, the event for SSH login can be
expressed as AEV_LOGIN_SSH, LOGIN_SSH or 4.
See showaudit -e all for a list of valid events.
-h Displays usage statement.
When used with other options or operands, an error
occurs.