View Single Post

  #2 (permalink)  
Old 05-17-2007, 09:49 PM
nixcraft's Avatar
nixcraft nixcraft is offline
Never say die
User
 
Join Date: Jan 2005
Location: BIOS
My distro: Ubuntu
Posts: 1,060
Rep Power: 10
nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute
Default

You need to use ausearch and aureport commands to search log files. For example display all failed attempts
Code:
ureport -f -i --summary --failed
Read man page of above two command and try following resources:
Article about audit log visualization
Audit System FAQ
Linux audit files to see who made changes to a file | nixCraft

Let me know if you need any further help!
__________________
Vivek | My personal blog
Linux Evangelist
Play hard stay cool
Reply With Quote