I would like to add the Internal commands (example cd , |, > and etc) track in AuditD.

Can I get the auditd rules to trace the user commands including the internal commands.

Thanks in advance,

Muthu