Trusted Solaris Audit Administration

trailer Token

A trailer token it marks the end of an audit record to support backward seeks of the audit trail. It is an optional token that is added as the last token of each record only when the AUDIT_TRAIL audit policy has been set. The fields are:

The following figure shows the token format.

Figure B-32 trailer Token Format

Graphic

A trailer token is displayed by praudit as follows:

trailer,136