Hello,
OS: RH ES 5.1
Kernel: 2.6.X
When I run aureport from the command line it works properly. When I run
the same command via a cron job aureport runs without error but the info
within report is not correct. The problem when running via cron is that
the range time in logs is incorrect. As follows:
Range of time in logs: 12/31/69 19:00:00.000 - 12/31/69 19:00:00.000
Selected time for report: 05/06/08 00:00:01 - 05/06/08 12:42:01
Now notice the range time in logs when the same aureport command is ran
from the command line. As follows:
Range of time in logs: 05/02/2008 06:40:01.347 - 05/06/2008 11:31:42.642
Selected time for report: 05/02/2008 06:40:01 - 05/06/2008 11:31:42.642
So the question is why is aureport using a log time of 12/31/69 via cron
vice 05/XX/08 as per the command line. Thanks.
P.S. aureport -t indictaes proper log times for the audit.logs within
/var/logs/audit
-Jim