Auditlogs prüfen

1. Melden Sie sich bei der globalen Zone als mcinstall an, und nehmen Sie die root-Rolle an.

   Anweisungen zur Anmeldung bei Oracle ILOM finden Sie im Oracle MiniCluster S7-2 - Administrationshandbuch.

   % ssh mcinstall@mc4-n1
   Password: ***************
   Last login: Tue Jun 28 10:47:38 2016 on rad/59
   Oracle Corporation      SunOS 5.11      11.3    June 2016
   Minicluster Setup successfully configured
   Unauthorized modification of this system configuration strictly prohibited
   mcinstall@mc4-n1:/var/home/mcinstall % su root
   Password: ***************
   #
   

2. Verwenden Sie den auditreduce-Befehl wie dargestellt.

   Dies ist die Syntax zur Anzeige der Auditlogs:

   auditreduce -z vm_name audit_file_name | praudit -s

   # cd /var/share/audit
   #
   # ls
   20160628051437.not_terminated.mc4-n1
   #
   # auditreduce  -z dbvmg1-zone-1-mc4-n1 20160628051437.not_terminated.mc4-n1 | praudit -s
   file,2016-06-27 22:58:53.000 -07:00,
   header,127,2,AUE_zone_state,,mc4-n1.us.oracle.com,2016-06-27 22:58:53.354 -07:00
   subject,mcinstall,root,root,root,root,26272,415120213,9462 65558 mc4-n1.us.oracle.com
   text,boot
   zone,dbvmg1-zone-1-mc4-n1
   return,success,0
   zone,global
   header,88,2,AUE_zone_state,na,mc4-n1.us.oracle.com,2016-06-27 23:02:30.767 -07:00
   text,reboot
   zone,dbvmg1-zone-1-mc4-n1
   return,success,0
   zone,global
   file,2016-06-27 23:02:30.000 -07:00,