NAME

audevents  — A dcecp object that lists audit events on a DCE host

SYNOPSIS

audevents catalog

audevents help  [operation | verbose  ]

audevents operations

audevents show event_class_list

audevents catalog

Arguments

event_class_list
The name of one or more recognized event classes.  Legal event classes can be viewed with the catalog  operation. 

operationThe name of the audevents  operation for which to display help information. 

Description

The audevents  object represents the event classes that are recognized by an audit daemon on a host.  Each event class is defined in an event class configuration file, and the filename is the symbolic name of the event class. 

This command operates only on the audit daemon on the local host. 

Errors

A representative list of errors that might be returned is not shown here.  Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages. 

Operations

audevents catalog

Returns a list of the names of all event classes.  The syntax is as follows:

audevents catalog

The catalog  operation returns a list of the names of all event classes.  It takes no arguments.  The order returned is arbitrary. 

Privileges Required

You must have r (read) permission to the event class directory, dcelocal/etc/audit/ec. 

Examples

dcecp> audevents catalog
dce_audit_admin_modify
dce_audit_admin_query
dce_audit_filter_modify
dce_audit_filter_query
dce_dts_mgt_modify
dce_dts_mgt_query
dce_dts_synch
dce_dts_time_provider
dce_sec_authent
dce_sec_control
dce_sec_modify
dce_sec_query
dce_sec_server
dcecp> 

audevents help

Returns help information about the audevents  object and its operations.  The syntax is as follows:

audevents help [operation | verbose ]

Options

verboseDisplays information about the audevents  object. 

Used without an argument or option, the audevents help  command returns brief information about each audevent  operation.  The optional operation argument is the name of an operation about which you want detailed information.  Alternatively, you can use the verbose  option for more detailed information about the audevents  object itself. 

Privileges Required

No special privileges are needed to use the audevents help command. 

Examples

dcecp> audevents help
catalog             Returns the list of event classes for an audit daemon.
show                Returns the contents of an event class.
help                Prints a summary of command-line options.
operations          Returns a list of the valid operations for this command.
dcecp>

audevents operations

Returns a list of the operations supported by the audevents object.  The syntax is as follows:

audevents operations

The list of available operations is in alphabetical order except for help  and operations, which are listed last. 

Privileges Required

No special privileges are needed to use the audevents operations command. 

Examples

dcecp> audevents operations
catalog show help operations
dcecp>

audevents show

Returns the contents of an event class.  The syntax is as follows:

audevents show  event_class_list

The show  operation returns the contents of an event class.  The argument is a list of names of event classes.  For each named event class, audevents show  returns the event class name and the numbers of the events in the event class.  (The numbers are 32-bit integers displayed in hexadecimal format.) 

Privileges Required

You must have r (read) permission to the event class directory, dcelocal/etc/audit/ec. 

Examples

dcecp> audevents show dce_audit_filter_query
{dce_audit_filter_query 0x101 0x102}
dcecp>
 dcecp> audevents show {dce_audit_filter_query   dce_dts_time_provider}
{dce_audit_filter_query 0x101 0x102}
{dce_dts_time_provider 0x211 0x212}
dcecp>

Related Information

Commands: aud(8dce), audfilter(8dce), auditd(8sec), audtrail(8dce), dcecp(8dce). 

Files: aud_audit_events(5sec), dts_audit_events(5sec), event_class(5sec), sec_audit_events(5sec).