Trusted Solaris Audit Administration

To Change the praudit Field Separator to a Tab

When the praudit command displays an audit token, it separates the data fields with commas. However, if a field (such as a time stamp) contains a comma, this cannot be distinguished from a field-separating comma.

    Press the Tab key as the value of the -d option to praudit(1M).


    $ praudit -d"<press Tab key>" 19970413120429.19970413180433.grebe
    

    There is no space between the -d option and the delimiter. Surround the delimiter with double quotes. The delimiter can be up to four characters long.