Timestamp in audit log file

Steve Grubb sgrubb at redhat.com
Fri Jul 1 13:40:01 UTC 2005


On Friday 01 July 2005 08:59, mark_a_schroering at raytheon.com wrote:
> I was just wondering if there was a way to get a timestamp to appear for
> each of the audit log entries.

The time stamp is there, but not really human readable. You should use the 
ausearch utility to look at the logs. The -i parameter tells it to interpret 
as much data and convert to human readable.

See if ausearch doesn't give you better info.

-Steve




More information about the Linux-audit mailing list