Trusted Solaris Audit Administration

To Read a Closed Audit File

The praudit command enables you to display audit records interactively and create very basic reports. For multiple files, the input is piped from auditreduce.

    Specify the audit file as the file argument to the praudit command.


    $ praudit 19970401000000.19970601000000.grebe
    

    This displays audit token per line to standard output.

    Specify the audit file as the file argument to the praudit -l command.


    $ praudit -l 19970401000000.19970601000000.grebe
    

    This displays one audit record per line to standard output.