Audit Filter

The audit filter provides the ability to limit the number of audit messages being displayed to only those that match the specified criteria. Select which columns should be used for filtering by clicking on the appropriate check boxes. Fill in each selected field to define the data to filter on. The "Source User", "Source Role", "Source Type", "Target User", "Target Role", "Target Type", and "Object Class" fields can accept multiple comma-separated entries. The "Inode", "PID", "Local Port", "Dest Port", "Source Port", "Port", and "Key Capability" fields accept a single integer. The match handling defines what to do with matches, either show them (and hide everything else) or hide them (and show everything else).

©2007 Tresys Technology, LLC