Audit flags that were previously selected can be further modified by a caret prefix, ^. The following table shows how the caret prefix modifies a preselected audit flag.
Table 23–3 Caret Prefix That Modifies Already-Specified Audit Flags
The prefixes to the audit flags can be used in the following files and commands:
In the flags line in the audit_control file
In flags field in the user's entry in the audit_user file
With arguments to the auditconfig command
See The audit_control File for an example of using the prefixes in the audit_control file.