SunSHIELD Basic Security Module Guide

How to Display User Activity on a Selected Data

In the following example, the system administrator checks to see when a user named fred logged in and logged out on April 13, 1990, by requesting the lo event class. The short-form date is in the form yymmdd. (The long form is described in the auditreduce(1M) man page.)

# auditreduce -d 900413 -u fred -c lo | praudit