[Fed-Talk] auditreduce question
[Fed-Talk] auditreduce question
- Subject: [Fed-Talk] auditreduce question
- From: Todd Heberlein <email@hidden>
- Date: Mon, 20 Jun 2005 16:11:49 -0700
Has anyone tried auditreduce with the "-o pid=<pid>" option? I cannot
get it it work. For example:
% auditreduce -o pid=388 /var/audit/20050620220520.20050620220951
generates no data, even though I know there are processes in the file
with a PID of 388.
Thanks,
Todd
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden