Shulou(Shulou.com)06/02 Report--

Editor to share with you the use of linux ausearch command search audit records, I believe that most people do not know much, so share this article for you to learn, I hope you will learn a lot after reading this article, let's go to learn the method!

Use the ausearch command to search for audit records, and you must execute the ausearch command as the root user.

Syntax format: ausearch [parameters]

Common parameters:

Reference example

Search for audit records based on root:

[root@linuxcool ~] # ausearch-ui 0

Search for audit records based on terminal tty1:

[root@linuxcool ~] # ausearch-tm tty1

Search for audit records based on process number 1799:

[root@linuxcool ~] # ausearch-tm tty1 above are all the contents of the audit records searched using linux's ausearch command. Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.