NAME

audevents - A dcecp object that lists audit events on a DCE host

SYNOPSIS

audevents catalog audevents help [operation | -verbose] audevents operations audevents show event_class_list

ARGUMENTS

operationThe name of the audevents operation for which to display help information. 

event_class_list
The name of one or more recognized event classes.  Legal event classes can be viewed with the catalog operation.

DESCRIPTION

The audevents object represents the event classes that are recognized by an audit daemon on a host.  Each event class is defined in an event class configuration file, and the filename is the symbolic name of the event class.  This command operates only on the audit daemon on the local host. 

OPERATIONS

audevents catalog

Returns a list of the names of all event classes.  The syntax is as follows: audevents catalog The catalog operation returns a list of the names of all event classes. It takes no arguments.  The order returned is arbitrary. Privileges Required You must have r (read) permission to the event class directory, dcelocal/etc/audit/ec. Examples

dcecp> audevents catalog
dce_audit_admin_modify
dce_audit_admin_query
dce_audit_filter_modify
dce_audit_filter_query
dce_dts_mgt_modify
dce_dts_mgt_query
dce_dts_synch
dce_dts_time_provider
dce_sec_authent
dce_sec_control
dce_sec_modify
dce_sec_query
dce_sec_server
dcecp>

audevents help

Returns help information about the audevents object and its operations.  The syntax is as follows: audevents help [operation | -verbose] Options

-verboseDisplays information about the audevents object. 

Used without an argument or option, the audevents help command returns brief information about each audevent operation.  The optional operation argument is the name of an operation about which you want detailed information.  Alternatively, you can use the ­-verbose option for more detailed information about the audevents object itself.  Privileges Required No special privileges are needed to use the audevents help command.  Examples

dcecp> audevents help
catalog             Returns the list of event classes for an audit daemon.
show                Returns the contents of an event class.
help                Prints a summary of command-line options.
operations          Returns a list of the valid operations for this command.
dcecp>

audevents operations

Returns a list of the operations supported by the audevents object.  The syntax is as follows: audevents operations The list of available operations is in alphabetical order except for help and operations, which are listed last. Privileges Required No special privileges are needed to use the audevents operations command. Examples

dcecp> audevents operations
catalog show help operations
dcecp>

audevents show

Returns the contents of an event class.  The syntax is as follows: audevents show event_class_list The show operation returns the contents of an event class.  The argument is a list of names of event classes.  For each named event class, audevents show returns the event class name and the numbers of the events in the event class.  (The numbers are 32 bit integers displayed in hex format.) Privileges Required You must have r (read) permission to the event class directory, dcelocal/etc/audit/ec. Examples

dcecp> audevents show dce_audit_filter_query
{dce_audit_filter_query 0x101 0x102}
dcecp>
 dcecp> audevents show {dce_audit_filter_query   dce_dts_time_provider}
{dce_audit_filter_query 0x101 0x102}
{dce_dts_time_provider 0x211 0x212}
dcecp>

RELATED INFORMATION

Commands:

auditd(1m), dcecp(1m), dcecp_aud(1m), dcecp_audfilter(1m), dcecp_audtrail(1m). 

Files:

aud_audit_events(5), dts_audit_events(5), event_class(5), sec_audit_events(5). 

Hewlett-Packard Company  —  OSF DCE 1.1/HP DCE 1.5