PreviousNext

audtrail show

Returns the audit trail in a readable format. The syntax is:

audtrail show audit_trail_file_name_list [-to filename]

Options

-to filename
Specifies the name of the file in which to store the audit trail output.

Description
The audtrail show operation returns the audit trail in a human readable format. This command takes as an argument a list of names of audit trial files. If more than one name is given then the output of each audit trail is concatenated together with a blank line between audit trails. The -to option specifies a destination filename for the trail. If this option is not present, the trail is returned from the command. If the option is present, the command returns an empty string.

Because audit trail files can grow quite large, using the -to switch is strongly recommended in order to avoid reading the entire trail into memory.

Note that when dcecp processes output, it sends the entire set of returned information to an internal buffer before displaying it. Therefore, when the output is directed to the screen, it can take a long time to appear.

Privileges Required
You must have r (read) permission on the audit trail file on the local file system.

Examples

dcecp> audtrail show my_trail

--- Start of an event record --- Event Number: 275
Event Name: LOGIN_getinfo
Event Outcome: success
Server: /.../stp.gburg.ibm.com/hosts/dceos2
Client: /.../stp.gburg.ibm.com/hosts/drinkernisti/self
Number of groups: 0
Authorization Status: Authorized with a pac
Date and Time Recorded: 1994-12-19-19:02:27.037-05:00I-----
1 Event (s) specific:
- item number 1 hosts/drinkernisti/self
--- End of an event record ---

--- Start of an event record --- Event Number: 275
Client: /.../stp.gburg.ibm.com/hosts/drinkernisti/self
Event Name: LOGIN_getinfo
Event Outcome: success
Server: /.../stp.gburg.ibm.com/hosts/dceos2
Client: Unknown client and cell uuids
Number of groups: 0
Authorization Status: Authorized with a pac
Date and Time Recorded: 1994-12-19-19:02:28.819-05:00I-----
1 Event (s) specific:
- item number 1 dce-rgy
--- End of an event record ---
dcecp>