Note: Audit Manager is deprecated and provided for backward compatibility only. We recommend that you use syslog events instead.
See
Enterprise Server Auditing for more information.
Restriction: This topic applies only when the Enterprise Server feature is enabled.
Syntax:
You use the Audit Manager Administration command line utility to do this. To generate a report for an active audit file, you
must first make it available for dumping. See
To Make the Active Audit File Available for Dumping.
mfauditadm -r [-o output-file-name] -f report-audit-file -c [-d]
Parameters:
- -r
- Generate a report.
- -o
output-file-name
- Name of the report file to be created. If not specified, the report file name is derived from the
report-audit-file name prefix, plus a
.txt extension. For example, if
report-audit-file filename is
mfaudit.DOCTEST.aud_3, the report file created is
mfaudit.DOCTEST.txt.
- -f
report-audit-file
- An audit file in the collection for which reports are to be generated.
- -c
- Generate a report for each available file in the collection.
- -d
- Mark each audit file available for dumping as dumped.
Example:
mfauditadm -r -c -o auditdata.txt -f mfaudit.DOCTEST.aud_5
Note: Once an audit file has been dumped, you cannot generate a report for it, nor can you dump it again until it has been reused
by the audit consolidator process.