I have a Tru64 5.1a pk4 site that just had audit set up for logins
success or fail. It works fine until we try to use the -t switch, then we
get the error:
OSF1 cpu1:/var/audit # audit_tool -S auditlog.cpu1.002 -t 0406291600
failed to open for sort
failed to open
0 records output
0 records processed
I can use the -T switch and get the data with no problems. There is
data before 4/26/04 at 1600.
Using -T and -t produces the same error as the above:
OSF1 cpu1:/var/audit # audit_tool -S auditlog.cpu1.002 -t 0406291600 -T
0406291620 <
failed to open for sort
failed to open
0 records output
0 records processed
These commands were working OK with 4.0f. Has the audit_tool syntax
changed with the new version, or is something else wrong?
Thanks
-denise
"Customer service may be the only way that a
company can distinguish itself from its
competition these days." -H. Frank Gibbard
Denise McCracken, Systems Software Specialist
Misys Healthcare Systems, Tucson, AZ
Certified Tru64 v5 Systems Administrator
Comptia Network+ Certified Professional
Received on Tue Jun 29 2004 - 20:29:42 NZST