audevents(1m)audevents(1m)NAME
audevents - A dcecp object that lists audit events on a DCE host
SYNOPSIS
audevents catalog
audevents help [operation | -verbose]
audevents operations
audevents show event_class_list
ARGUMENTS
The name of one or more recognized event classes. Legal event classes
can be viewed with the catalog operation. The name of the audevents
operation for which to display help information.
DESCRIPTION
The audevents object represents the event classes that are recognized
by an audit daemon on a host. Each event class is defined in an event
class configuration file, and the filename is the symbolic name of the
event class.
This command operates only on the audit daemon on the local host.
OPERATIONS
audevents catalog
Returns a list of the names of all event classes. The syntax is as
follows: audevents catalog
The catalog operation returns a list of the names of all event classes.
It takes no arguments. The order returned is arbitrary.
Privileges Required
You must have r (read) permission to the event class directory, dcelo‐
cal/etc/audit/ec.
Examples
dcecp> audevents catalog dce_audit_admin_modify dce_audit_admin_query
dce_audit_filter_modify dce_audit_filter_query dce_dts_mgt_modify
dce_dts_mgt_query dce_dts_synch dce_dts_time_provider dce_sec_authent
dce_sec_control dce_sec_modify dce_sec_query dce_sec_server dcecp>
audevents help
Returns help information about the audevents object and its operations.
The syntax is as follows: audevents help [operation | -verbose]
Options Displays information about the audevents object.
Used without an argument or option, the audevents help command returns
brief information about each audevents operation. The optional opera‐
tion argument is the name of an operation about which you want detailed
information. Alternatively, you can use the -verbose option for more
detailed information about the audevents object itself.
Privileges Required
No special privileges are needed to use the audevents help command.
Examples
dcecp> audevents help catalog Returns the list of event
classes for an audit daemon. show Returns the contents
of an event class. help Prints a summary of command-
line options. operations Returns a list of the valid opera‐
tions for this command. dcecp>
audevents operations
Returns a list of the operations supported by the audevents object.
The syntax is as follows: audevents operations
The list of available operations is in alphabetical order except for
help and operations, which are listed last.
Privileges Required
No special privileges are needed to use the audevents operations com‐
mand.
Examples
dcecp> audevents operations catalog show help operations dcecp>
audevents show
Returns the contents of an event class. The syntax is as follows:
audevents show event_class_list
The show operation returns the contents of an event class. The argu‐
ment is a list of names of event classes. For each named event class,
audevents show returns the event class name and the numbers of the
events in the event class. (The numbers are 32-bit integers displayed
in hexadecimal format.)
Privileges Required
You must have r (read) permission to the event class directory, dcelo‐
cal/etc/audit/ec.
Examples
dcecp> audevents show dce_audit_filter_query {dce_audit_filter_query
0x101 0x102} dcecp>
dcecp> audevents show {dce_audit_filter_query dce_dts_time_provider}
{dce_audit_filter_query 0x101 0x102} {dce_dts_time_provider 0x211
0x212} dcecp>
RELATED INFORMATION
Commands: auditd(1m), dcecp(1m), dcecp_aud(1m), dcecp_audfilter(1m),
dcecp_audtrail(1m).
Files: aud_audit_events(5), dts_audit_events(5), event_class(5),
sec_audit_events(5).
audevents(1m)
