Hello,
OS: RH ES
5.1
Kernel:
2.6.X
When I run aureport from the command line it works
properly. When I run the same command via a cron job aureport runs without error
but the info within report is not correct. The problem when running via cron is
that the range time in logs is incorrect. As follows:
Range of
time in logs: 12/31/69 19:00:00.000 - 12/31/69 19:00:00.000
Selected
time for report: 05/06/08 00:00:01 - 05/06/08 12:42:01
Now
notice the range time in logs when the same aureport command is ran from the
command line. As follows:
Range of time in logs: 05/02/2008
06:40:01.347 - 05/06/2008 11:31:42.642
Selected time for report:
05/02/2008 06:40:01 - 05/06/2008 11:31:42.642
So the
question is why is aureport using a log time of 12/31/69 via cron vice 05/XX/08
as per the command line. Thanks.
P.S. aureport -t indictaes proper log times for
the audit.logs within /var/logs/audit
-Jim