log-audit-show
This command displays information about the log audit configuration.
Syntax log-audit-show
|
Specify between 0, and 2 of the following options: |
|
|
start-time date/time: yyyy-mm-ddThh:mm:ss |
The start time for the audit log. |
|
end-time date/time: yyyy-mm-ddThh:mm:ss |
The end time for the audit log. |
|
duration duration: #d#h#m#s |
The duration of the audit log. |
|
Specify any of the following options: |
|
|
program program-string |
The program type. |
|
pid pid-number |
The product indentifiier. |
|
name name-string |
The name to match. |
|
code code-number |
The code number. |
|
level critical|error|warn|note|info |
The severity level. |
|
vnet vnet-name |
The name of the virtual network. |
|
remote_switch node name |
The name of the remote switch. |
|
user user-name |
The username. |
|
client-pid client-pid-number |
The client program identifier. |
|
client-addr ip-address |
The client IP address. |
|
port port-number |
The port number. |
|
vlan vlan-id |
The VLAN identifier. |
|
vxlan vxlan-id |
The VXLAN identifier. |
|
count number |
Displays the count between 1, and 50000. |
|
starting-point starting-point-number |
The starting point of the log audit. |
|
length length-number |
The length of the log audit. |
|
reverse|no-reverse |
Specifies if the log is displayed in reverse or not. |
Defaults None
Access CLI
History
|
Version 1.2 |
Command introduced. |
|
Version 2.2 |
The parameters starting-point, length, and reverse added. |
|
Version 2.2.5 |
The IP address is logged as part of a user login event. |
|
Version 6.0.0 |
The keyword info added to the parameter level. |
Usage Use this command to display information about the audit log.
Examples To display information about log audits, use the following command:
CLI (network-admin@switch1) > log-audit-show
category time name code level user client-addr message
-------- -------------------------------- ------------- ----- ----- ------------------- ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
audit 2022-02-03,09:58:01.431873-08:00 shell_command 33000 info network-admin(root) Command "ls --color=auto" status exit-code=0
audit 2022-02-03,09:58:44.723339-08:00 shell_command 33000 info network-admin(root) Command "ls --color=auto" status exit-code=0
audit 2022-02-03,09:59:03.517379-08:00 shell_command 33000 info network-admin(root) Command "ls --color=auto" status exit-code=0
audit 2022-02-03,10:50:26.377979-08:00 shell_command 33000 info network-admin(root) Command "nvauditsh" status exit-code=0
audit 2022-02-03,10:50:26.381026-08:00 shell_command 33000 info network-admin 10.140.0.66 Command "sudo su" status exit-code=0
audit 2022-02-03,10:50:27.058889-08:00 shell_command 33000 info network-admin 10.140.0.66 Command "bash" status exit-code=0
audit 2022-02-03,10:50:27.059543-08:00 user_command 11001 info network-admin 10.140.0.66 Command "shell" result success
audit 2022-02-04,04:53:01.538596-08:00 user_command 11001 info network-admin 10.140.0.57 Command "l3-settings-modify" result failure: "Unrecognized command "l3-settings-modify""
audit 2022-02-04,05:11:03.674616-08:00 user_command 11001 info network-admin 10.140.0.57 Command "[" result failure: "Unrecognized command "[""
audit 2022-02-07,04:43:07.120607-08:00 user_command 11001 info network-admin 10.140.0.106 Command "vlan-create id 123 ports 21 scope local vxlan 12345" result success
audit 2022-02-07,10:37:36.799465-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-create name testsys host server-ext-7c" result failure: "Missing required argument scope"
audit 2022-02-07,10:37:41.315385-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-create name testsys host server-ext-7c scope local" result success
audit 2022-02-07,10:40:58.705772-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-delete name testsys" result success
audit 2022-02-07,10:41:04.488446-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-create name testsys host server-ext-7c scope local port 10514" result success
audit 2022-02-07,10:43:55.282730-08:00 user_command 11001 info network-admin 10.140.0.66 Command "vlan-create id 100 scope local" result success
audit 2022-02-07,10:44:31.759821-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-modify name testsys message-format structured" result success
audit 2022-02-07,10:44:51.878142-08:00 user_command 11001 info network-admin 10.140.0.66 Command "vlan-delete id 100" result success
audit 2022-02-07,10:45:08.666358-08:00 user_command 11001 info network-admin 10.140.0.66 Command "vlan-create id 100 scope local" result success
audit 2022-02-07,10:52:51.739158-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-delete name testsys" result success
audit 2022-02-07,10:53:29.120571-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-modify name testsys transport tcp-tls scope local port 10514" result failure: "Unable to find admin-syslog to modify"
audit 2022-02-07,10:53:41.499865-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-create name testsys transport tcp-tls scope local port 10514" result failure: "Missing required argument host"
audit 2022-02-07,10:53:51.961906-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-create name testsys transport tcp-tls scope local port 10514 host server-ext-7c" result success
audit 2022-02-07,10:54:01.042365-08:00 user_command 11001 info network-admin 10.140.0.66 Command "admin-syslog-create name testsys transport tcp-tls scope local port 10514 host server-ext-7c" result failure: "admin-syslog with name testsys already exists"
audit 2022-02-07,10:54:09.866597-08:00 user_command 11001 info network-admin 10.140.0.66 Command "vlan-create id 101 scope local" result success
audit 2022-02-07,10:54:35.091144-08:00 user_command 11001 info network-admin 10.140.0.66 Command "syslog-tls-cert-import" result failure: "Missing required argument "file-ca"