The auditing subsystem provides eight user-level commands for controlling audit functions. The commands are:
| auditcnv(1M) | creates the audit mask file for the user login interface. |
| auditfltr(1M) | provides for the portability of audit event log files among different machine architectures. |
| auditlog(1M) | displays or sets audit event log file attributes. |
| auditmap(1M) | creates the audit map files. The audit map files are used by the auditrpt(1M) command to translate numeric data into character strings. |
| auditoff(1M) | disables the auditing subsystem. |
| auditon(1M) | enables the auditing subsystem. |
| auditrpt(1M) | selects and displays information from the audit event log file. |
| auditset(1M) | displays or sets auditing criteria. The useradd(1M) and usermod(1M) commands, which are not part of the auditing subsystem, can also be used to set audit criteria. |