September 2000
Beginner
1312 pages
33h 47m
English
/usr/sbin/praudit [-lrs][-ddel][filename...]
The praudit command enables you to display audit records interactively and create very basic reports. praudit displays records in one of several human-readable but otherwise noninterpreted forms. You can produce more sophisticated displays and reporting by using sed or awk to postprocess the output from praudit. Alternatively, you can write programs that interpret and process the binary audit records.
praudit reads the listed file names (or standard input, if you specify no filename) and interprets the data as audit trail records as defined in audit.log(4). By default, times, UIDs, and GIDs are converted to their ASCII representation. ...