This section describes a few common uses of auditreduce and praudit to select and manage data. See the auditreduce(1M) man page for more examples.
Prerequisites for running the auditreduce and praudit commands:
You are in an administrative role that includes the Audit Review profile. The role admin includes this profile by default.
You are in an admin_high
workspace of that role.
To create an admin_high
workspace, see To Create an Admin_High Workspace in Chapter 2, Auditing Setup.
You have launched a terminal window.
To access the audit trail for a distributed system:
You issue the auditreduce command from the audit administration server.