1 '\" te
   2 .\" Copyright (c) 2006  Sun Microsystems, Inc. All Rights Reserved.

   3 .\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License").  You may not use this file except in compliance with the License.
   4 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing.  See the License for the specific language governing permissions and limitations under the License.
   5 .\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE.  If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
   6 .TH AUDITREDUCE 1M "Mar 6, 2017"
   7 .SH NAME
   8 auditreduce \- merge and select audit records from audit trail files
   9 .SH SYNOPSIS
  10 .LP
  11 .nf
  12 \fBauditreduce\fR [\fIoptions\fR] [\fIaudit-trail-file\fR]...
  13 .fi
  14 
  15 .SH DESCRIPTION
  16 .LP
  17 \fBauditreduce\fR allows you to select or merge records from audit trail files.
  18 Audit files can be from one or more machines.
  19 .sp
  20 .LP
  21 The merge function merges together audit records from one or more input audit
  22 trail files into a single output file. The records in an audit trail file are
  23 assumed to be sorted in chronological order (oldest first) and this order is
  24 maintained by \fBauditreduce\fR in the output file.
  25 .sp
  26 .LP

 536 \fBsock=\fIport_number|machine\fR\fR
 537 .ad
 538 .sp .6
 539 .RS 4n
 540 Select records containing socket objects with the specified \fIport_number\fR
 541 or the specified \fImachine\fR where \fImachine\fR is a machine name as defined
 542 in \fBhosts\fR(4).
 543 .RE
 544 
 545 .sp
 546 .ne 2
 547 .na
 548 \fBfmri=\fIservice instance\fR\fR
 549 .ad
 550 .sp .6
 551 .RS 4n
 552 Select records containing fault management resource identifier (FMRI) objects
 553 with the specified \fIservice instance\fR. See \fBsmf\fR(5).
 554 .RE
 555 










 556 .RE
 557 
 558 .sp
 559 .ne 2
 560 .na
 561 \fB\fB-r\fR \fIreal-user\fR\fR
 562 .ad
 563 .sp .6
 564 .RS 4n
 565 Select records with the specified \fIreal-user\fR.
 566 .RE
 567 
 568 .sp
 569 .ne 2
 570 .na
 571 \fB\fB-s\fR \fIsession-id\fR\fR
 572 .ad
 573 .sp .6
 574 .RS 4n
 575 Select audit records with the specified \fIsession-id\fR.

   1 '\" te
   2 .\" Copyright (c) 2006  Sun Microsystems, Inc. All Rights Reserved.
   3 .\" Copyright 2018 Nexenta Systems, Inc. All rights reserved.
   4 .\" The contents of this file are subject to the terms of the Common Development and Distribution License (the "License").  You may not use this file except in compliance with the License.
   5 .\" You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE or http://www.opensolaris.org/os/licensing.  See the License for the specific language governing permissions and limitations under the License.
   6 .\" When distributing Covered Code, include this CDDL HEADER in each file and include the License file at usr/src/OPENSOLARIS.LICENSE.  If applicable, add the following below this CDDL HEADER, with the fields enclosed by brackets "[]" replaced with your own identifying information: Portions Copyright [yyyy] [name of copyright owner]
   7 .TH AUDITREDUCE 1M "Jul 10, 2018"
   8 .SH NAME
   9 auditreduce \- merge and select audit records from audit trail files
  10 .SH SYNOPSIS
  11 .LP
  12 .nf
  13 \fBauditreduce\fR [\fIoptions\fR] [\fIaudit-trail-file\fR]...
  14 .fi
  15 
  16 .SH DESCRIPTION
  17 .LP
  18 \fBauditreduce\fR allows you to select or merge records from audit trail files.
  19 Audit files can be from one or more machines.
  20 .sp
  21 .LP
  22 The merge function merges together audit records from one or more input audit
  23 trail files into a single output file. The records in an audit trail file are
  24 assumed to be sorted in chronological order (oldest first) and this order is
  25 maintained by \fBauditreduce\fR in the output file.
  26 .sp
  27 .LP

 537 \fBsock=\fIport_number|machine\fR\fR
 538 .ad
 539 .sp .6
 540 .RS 4n
 541 Select records containing socket objects with the specified \fIport_number\fR
 542 or the specified \fImachine\fR where \fImachine\fR is a machine name as defined
 543 in \fBhosts\fR(4).
 544 .RE
 545 
 546 .sp
 547 .ne 2
 548 .na
 549 \fBfmri=\fIservice instance\fR\fR
 550 .ad
 551 .sp .6
 552 .RS 4n
 553 Select records containing fault management resource identifier (FMRI) objects
 554 with the specified \fIservice instance\fR. See \fBsmf\fR(5).
 555 .RE
 556 
 557 .sp
 558 .ne 2
 559 .na
 560 \fBwsid=\fIWindows SID\fR\fR
 561 .ad
 562 .sp .6
 563 .RS 4n
 564 Select records containing Windows SIDS matching the specified \fISID\fR.
 565 .RE
 566 
 567 .RE
 568 
 569 .sp
 570 .ne 2
 571 .na
 572 \fB\fB-r\fR \fIreal-user\fR\fR
 573 .ad
 574 .sp .6
 575 .RS 4n
 576 Select records with the specified \fIreal-user\fR.
 577 .RE
 578 
 579 .sp
 580 .ne 2
 581 .na
 582 \fB\fB-s\fR \fIsession-id\fR\fR
 583 .ad
 584 .sp .6
 585 .RS 4n
 586 Select audit records with the specified \fIsession-id\fR.