You need to use ausearch and aureport commands to search log files. For example display all failed attempts
Code:
ureport -f -i --summary --failed
Read man page of above two command and try following resources:
Article about audit log visualization
Audit System FAQ
Linux audit files to see who made changes to a file | nixCraft
Let me know if you need any further help!
__________________
Vivek Gite
Linux Evangelist
 Be proud RHEL user, and let the world know about your enterprise choices! Join RedHat user group.
 Always use CODE tags for posting system output and commands!
 Do you run a Linux? Let's face it, you need help
|