vxauditlogadm - Exports audit log entries in Veritas File System (VxFS).

VRTSvxfs

/opt/VRTS/bin/ vxauditlogadm [-f file] [-t type] -m mount_point

The vxauditlogadm exports audit log entries stored in VxFS in human readable format. These entries are stored on the filename specified, if no file is specified displayed on standard output.

-f file	Exported log entries are stored in the filename specified.
-t type	Exports log entries related to type specified.
	Currently supported types: worm

mount_point
	Specifies mount point for which enteries need to be exported.

The following command exports entries to the file audit_log_entries

# vxauditlogadm -f aulog_log_entries -m /mnt1
recid 1, time 1599460115, type worm, file file1, ino 4, operation remove, status fail, uid 0, gid 0, process rm

The following command exports entries of type worm

# vxauditlogadm -t worm -m /mnt1
recid 1, time 1599730277, type worm, file file1, ino 4, operation remove, status fail, uid 0, gid 0, process rm
recid 2, time 1599730277, type worm, file file1, ino 4, operation rename, status fail, uid 0, gid 0, process mv

Storage Foundation Administrator’s Guide