audtrail show
Returns the audit trail in a readable format. The syntax is:
audtrail show audit_trail_file_name_list [-to filename]
Options
-to filename Specifies the name of the file in which to store the audit trail output.
Description The audtrail show operation returns the audit trail in a human readable format. This command takes as an argument a list of names of audit trial files. If
more than one name is given then the output of each audit trail is concatenated together with a blank line between audit trails. The -to option specifies a destination filename for the
trail. If this option is not present, the trail is returned from the command. If the option is present, the command returns an empty string.
Because audit trail files can grow quite large, using the -to switch is strongly recommended in order to avoid reading the entire trail into memory.
Note that when dcecp processes output, it sends the entire set of returned information to an internal buffer before displaying it. Therefore, when the output is directed to the screen, it
can take a long time to appear.
Privileges Required You must have r (read) permission on the audit trail file on the local file system.
Examples
dcecp> audtrail show my_trail --- Start of an event record --- Event Number: 275 Event Name: LOGIN_getinfo Event Outcome:
success Server: /.../stp.gburg.ibm.com/hosts/dceos2 Client: /.../stp.gburg.ibm.com/hosts/drinkernisti/self Number of groups: 0 Authorization
Status: Authorized with a pac Date and Time Recorded: 1994-12-19-19:02:27.037-05:00I----- 1 Event (s) specific: - item number 1
hosts/drinkernisti/self --- End of an event record --- --- Start of an event record --- Event Number: 275 Client:
/.../stp.gburg.ibm.com/hosts/drinkernisti/self Event Name: LOGIN_getinfo Event Outcome: success Server: /.../stp.gburg.ibm.com/hosts/dceos2 Client:
Unknown client and cell uuids Number of groups: 0 Authorization Status: Authorized with a pac Date and Time Recorded: 1994-12-19-19:02:28.819-05:00I-----
1 Event (s) specific: - item number 1 dce-rgy --- End of an event record --- dcecp>
|