The Oracle ILOM audit log displays user actions that result in a configuration change. User actions such as logins, commands, command parameters, and command success or failure are tracked.
-> show /SP/logs/audit/list
Audit
ID Date/Time Class Type Severity
----- ------------------------ -------- -------- --------
299 Fri Jan 12 03:41:16 2001 Audit UI minor
root : Open Session : object = "/SP/sessions/1700/type" : value =
"shell" : success
298 Fri Jan 12 02:13:18 2001 Audit UI minor
root : Close Session : object = "/SP/sessions/1004/type" : value =
"shell" : success
297 Thu Jan 11 04:55:41 2001 Audit UI minor
root : Close Session : object = "/SP/sessions/1551/type" : value = "www"
: success
Paused: press any key to continue, or 'q' to quit
->
-> show /SP/logs/audit/list Class==class Type==type
For example, to display the minor UI audit log events, type:
-> show /SP/logs/event/list Class==Audit Type==minor
Event
ID Date/Time Class Type Severity
----- ------------------------ -------- -------- --------
388 Sun Oct 11 12:38:38 2015 Audit UI minor
root : Set : object = "/SYS/LOCATE/value" : value = "on" : error
387 Sun Oct 11 12:36:40 2015 Audit UI minor
root : Set : object = "/SP/clients/smtp/state" : value = "enabled" :
success
Paused: press any key to continue, or 'q' to quit
->
The Q key quits.