Overview of the auditing subsystem

Auditing commands

The auditing subsystem provides eight user-level commands for controlling audit functions. The commands are:

auditcnv(1M) creates the audit mask file for the user login interface.

auditfltr(1M) provides for the portability of audit event log files among different machine architectures.

auditlog(1M) displays or sets audit event log file attributes.

auditmap(1M) creates the audit map files. The audit map files are used by the auditrpt(1M) command to translate numeric data into character strings.

auditoff(1M) disables the auditing subsystem.

auditon(1M) enables the auditing subsystem.

auditrpt(1M) selects and displays information from the audit event log file.

auditset(1M) displays or sets auditing criteria. The useradd(1M) and usermod(1M) commands, which are not part of the auditing subsystem, can also be used to set audit criteria.

auditcnv(1M)	creates the audit mask file for the user login interface.
auditfltr(1M)	provides for the portability of audit event log files among different machine architectures.
auditlog(1M)	displays or sets audit event log file attributes.
auditmap(1M)	creates the audit map files. The audit map files are used by the auditrpt(1M) command to translate numeric data into character strings.
auditoff(1M)	disables the auditing subsystem.
auditon(1M)	enables the auditing subsystem.
auditrpt(1M)	selects and displays information from the audit event log file.
auditset(1M)	displays or sets auditing criteria. The useradd(1M) and usermod(1M) commands, which are not part of the auditing subsystem, can also be used to set audit criteria.