查看审计日志

1. 以 mcinstall 身份登录到全局区域，并承担 root 角色。

   有关 Oracle ILOM 登录说明，请参阅《Oracle MiniCluster S7-2 管理指南》。

   % ssh mcinstall@mc4-n1
   Password: ***************
   Last login: Tue Jun 28 10:47:38 2016 on rad/59
   Oracle Corporation      SunOS 5.11      11.3    June 2016
   Minicluster Setup successfully configured
   Unauthorized modification of this system configuration strictly prohibited
   mcinstall@mc4-n1:/var/home/mcinstall % su root
   Password: ***************
   #
   

2. 如下所示使用 auditreduce 命令。

   下面是用于查看审计日志的语法：

   auditreduce -z vm_name audit_file_name | praudit -s

   # cd /var/share/audit
   #
   # ls
   20160628051437.not_terminated.mc4-n1
   #
   # auditreduce  -z dbvmg1-zone-1-mc4-n1 20160628051437.not_terminated.mc4-n1 | praudit -s
   file,2016-06-27 22:58:53.000 -07:00,
   header,127,2,AUE_zone_state,,mc4-n1.us.oracle.com,2016-06-27 22:58:53.354 -07:00
   subject,mcinstall,root,root,root,root,26272,415120213,9462 65558 mc4-n1.us.oracle.com
   text,boot
   zone,dbvmg1-zone-1-mc4-n1
   return,success,0
   zone,global
   header,88,2,AUE_zone_state,na,mc4-n1.us.oracle.com,2016-06-27 23:02:30.767 -07:00
   text,reboot
   zone,dbvmg1-zone-1-mc4-n1
   return,success,0
   zone,global
   file,2016-06-27 23:02:30.000 -07:00,