Fujitsu SPARC Enterprise M3000 Xscf Reference Manual page 511

-e events
-h
-i audit-ids
-l
-m del
-n
-p privilege-results
-r return-values
-S start-record
Selects records of the indicated events. events is a comma-
separated list of audit events. An event may be specified by
its numeric value or its name. The AEV_ prefix may be
omitted. For example, the event for SSH login can be
expressed as AEV_LOGIN_SSH, LOGIN_SSH or 4.
See showaudit -e all for a list of valid events.
Displays usage statement.
When used with other options or operands, an error occurs.
Selects records of the indicated audit session identifier. If
you become interested in activity reflected in a particular
audit record, you might wish to view all the audit records
for that session. An audit-id is not persistent and can be
reassigned across resets of the Service Processor. audit-ids is
a comma-separated list of audit session identifiers. The
audit-id is the number following the label subject in an
audit file.
For example, in the following listing, the audit-id is 1
(shown in boldface for emphasis).
subject, ,bob,normal,telnet 45880 jupiter
1
Prints one line per record.
Uses del as the field delimiter instead of the default
delimiter, which is the comma. If del has special meaning
for the shell, it must be quoted. The maximum size of a
delimiter is three characters. The delimiter is not
meaningful and is not used with the -x option.
Specifies that UIDs and IP addresses should not be
converted to user names or host names.
Select records according to the indicated privilege-results.
privilege-results is a comma-separated list. privilege-results
are: granted, denied, or error.
Selects records according to the indicated return values.
returnvals is a comma-separated list of the values: success,
or failure. success corresponds to a return value of 0.
failure corresponds to a nonzero return value.
Selects the first record matching the selection criteria to
display.
viewaudit(8)
System Administration 489