I am using RHEL 5.8 (upgraded from 5.7) and I can not get these reporting tools to work from cron. I have tried many variations to no avail:
/sbin/ausearch -if /var/log/audit/audit.log -ts 05/29/2012 00:00:00 -te 05/29/2012 23:59:59 > somefile.txt
/sbin/ausearch --input-logs -ts 05/29/2012 00:00:00 -te 05/29/2012 23:59:59 > somefile.txt
cat /var/log/audit/audit.log | /sbin/ausearch -ts 05/29/2012 00:00:00 -te 05/29/2012 23:59:59 > somefile.txt
Each of those work from the command line and in a script, but fail when the script is run from cron.
Do I need to set up a more extensive environment in my script? I should not need to set LD_LIBRARY_PATH and I have explicitely called ausearch by it's full path.
Thank you very much in advance,
Dean