diff options
author | 2016-01-20 01:10:01 +0000 | |
---|---|---|
committer | 2016-01-20 01:10:11 +0000 | |
commit | 19d701ddf07d855128ded0cf2b573ce468e3bdd6 (patch) | |
tree | 0edcd3461ca903c76e431bb7c6348c42a0f12488 /framework/src/audit/tools/aulast/aulast.8 | |
parent | fac6fbefbfad1cf837ddd88bc0d330559c8eb6f9 (diff) |
Removing Suricata and Audit from source repo, and updated build.sh to avoid building suricata. Will re-address this in C release via tar balls.
Change-Id: I3710076f8b7f3313cb3cb5260c4eb0a6834d4f6e
Signed-off-by: Ashlee Young <ashlee@wildernessvoice.com>
Diffstat (limited to 'framework/src/audit/tools/aulast/aulast.8')
-rw-r--r-- | framework/src/audit/tools/aulast/aulast.8 | 47 |
1 files changed, 0 insertions, 47 deletions
diff --git a/framework/src/audit/tools/aulast/aulast.8 b/framework/src/audit/tools/aulast/aulast.8 deleted file mode 100644 index 25705f95..00000000 --- a/framework/src/audit/tools/aulast/aulast.8 +++ /dev/null @@ -1,47 +0,0 @@ -.TH AULAST: "8" "Nov 2008" "Red Hat" "System Administration Utilities" -.SH NAME -aulast \- a program similar to last -.SH SYNOPSIS -.B aulast [ options ] [ user ] [ tty ] - -.SH DESCRIPTION -\fBaulast\fP is a program that prints out a listing of the last logged in users similarly to the program \fBlast\fP and \fBlastb\fP. Aulast searches back through the audit logs or the given audit log file and displays a list of all users logged in (and out) based on the range of time in the audit logs. Names of users and tty’s can be given, in which case aulast will show only those entries matching the arguments. Names of ttys can be abbreviated, thus aulast 0 is the same as last tty0. - -The pseudo user reboot logs in each time the system is rebooted. Thus last reboot will show a log of all reboots since the log file was created. - -The main difference that a user will notice is that \fBaulast\fP print events from oldest to newest, while \fBlast\fP prints records from newest to oldest. Also, the audit system is not notified each time a tty or pty is allocated, so you may not see quite as many records indicating users and their tty's. - -.SH OPTIONS -.TP -.B \-\-bad -Report on the bad logins. - -.TP -.B \-\-extract -Write raw audit records used to create the displayed report into a file aulast.log in the current working directory. - -.TP -.BI \-f file -Use the file instead of the audit logs for input. - -.TP -.B \-\-proof -Print out the audit event serial numbers used to determine the preceding line of the report. A Serial number of 0 is a place holder and not an actual event serial number. The serial numbers can be used to examine the actual audit records in more detail. Also an ausearch query is printed that will let you find the audit records associated with that session. - -.TP -.B \-\-stdin -Take audit records from stdin. - -.SH "EXAMPLES" -.nf -To see this month's logins -.B ausearch \-\-start this-month \-\-raw | aulast \-\-stdin - -.SH "SEE ALSO" -.BR last (1), -.BR lastb (1), -.BR ausearch (8), -.BR aureport (8). - -.SH AUTHOR -Steve Grubb |