Using the auditreduce and praudit Commands

This section describes a few common uses of auditreduce and praudit to select and manage data. See the auditreduce(1M) man page for more examples.

Prerequisites for running the auditreduce and praudit commands:

• You are in an administrative role that includes the Audit Review profile. The role admin includes this profile by default.

• You are in an admin_high workspace of that role.

  To create an admin_high workspace, see To Create an Admin_High Workspace in Chapter 2, Auditing Setup.

• You have launched a terminal window.

To access the audit trail for a distributed system:

• You issue the auditreduce command from the audit administration server.