AUREPORT(8) (System Administration Utilities) (NAME) aureport - (SYNOPSIS) aureport [] (DESCRIPTION) aureport . aureport (stdin) . . . ausearch -a event number . . aureport . (OPTIONS) -au, --auth . -a, --avc AVC. --comm . -c, --config . -cr, --crypto (crypto). --debug (stderr). --delete MAC (remove) . --eoe-timeout seconds (end of event). end_of_event_timeout auditd.conf(5) . /etc/auditd/auditd.conf (override) . -e, --event . --add MAC (create) . --escape option (escape) . raw tty shell shell_quote. . shell tty . tty . -f, --file af_unix. --failed . . -h, --host (hosts). --help . -i, --interpret . uid . . . -if, --input file | directory file () directory () . . . --input-logs auditd.conf . aureport (cron job) . --integrity (integrity). -k, --key . -l, --login (logins). -m, --mods . -ma, --mac (MAC). -n, --anomaly (anomaly). (NIC) (promiscuous mode) (segfault) . --node node-name node-name . . . -nc, --no-config CONFIG_CHANGE. . (false positives) . -p, --pid (PIDs). -r, --response . -s, --syscall (syscalls). --success . . --summary . . -t, --log . --tty tty. -te, --end [end-date] [end-time] . (locale) . today () . now () . AM PM . en_US.utf8 09/03/2009 . 18:00:00 . LC_TIME . : now recent this-hour boot today yesterday this-week week-ago this-month this-year. Now . Recent . Boot (boot) . Today . Yesterday . This-week ( localtime ). Week-ago . This-month . This-year . -tm, --terminal (terminals). -ts, --start [start-date] [start-time] . (locale) . today () . midnight () . AM PM . en_US.utf8 09/03/2009 . 18:00:00 . LC_TIME . : now recent this-hour boot today yesterday this-week week-ago this-month this-year. Boot (boot) . Today . Recent . Yesterday . This-week ( localtime ). Week-ago . This-month . This-year . -u, --user . -v, --version . --virt . -x, --executable . (NOTE) (boot time) . /proc/uptime . ntp . . : date -d "`cut -f1 -d. /proc/uptime` seconds ago" (SEE ALSO) ausearch(8), auditd(8), auditd.conf(5). Red Hat AUREPORT(8)