(no subject) - Linux-audit - Linux-Audit List Archives

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

(no subject)

[PATCH] improve performance with...

[PATCH 1/2] fix auditctl -D

Kirkwood, David A

Wednesday, 3 May 2006 Wed, 3 May '06

12:21 p.m.

I don't see any timestamps on audit events. How can I bracket events between to dates /times?

Attachments:

attachment.html (text/html — 1.5 KB)

Reply

Show replies by date

Steve Grubb

Wednesday, 3 May Wed, 3 May

12:31 p.m.

On Wednesday 03 May 2006 13:21, Kirkwood, David A wrote:

I don't see any timestamps on audit events. How can I bracket events between to dates /times?

The ausearch utility was created to view the audit records. It extracts that information from the event. Can you give that a try? ausearch -ts 1:00:00 -i (This also assumes you have the audit daemon running.) -Steve

Reply

6808

days inactive

6808

days old

linux-audit@lists.linux-audit.osci.io

Manage subscription

1 comments

2 participants

tags (0)

participants (2)

Kirkwood, David A
Steve Grubb