cmd/praudit/print_audit.txt

5  * Common Development and Distribution License, Version 1.0 only
12  * and limitations under the License.
15  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
35      print_audit, print_audit_buf  -  format and print audit trail data
39      print_audit_xml_ending_buf    - print audit XML prolog and ending
53      print_audit() formats binary audit data from stdin and prints in
55      in_buf and copies in ASCII to out_buf, terminating with a null
58      print_audit_xml_prolog and print_audit_xml_prolog_buf will print
60      of the DTD which is used to parse the XML, and also identifies the
64      print_audit_xml_ending and print_audit_xml_ending_buf print only
71 	   Default formatting.  By default, times, user  and  group  IDs
72 	   (UIDs and GIDs, respectively) are converted to their ASCII
73 	   representation. Record type and  event fields  are converted
79            record  types,  and  events are displayed as integers.
80            This value and PRF_SHORTM are exclusive. If  both
81            are used, no processing is done and EINVAL is returned.
85            are  converted to ASCII and displayed. The short ASCII
86            representations for the record type and  event  fields
88 	   both are used, no processing is done and EINVAL is returned.
92            output to identify tokens and fields within tokens.
95            print XML prolog and ending functions described here
96            must be used separately from print_audit and print_audit_buf
100            Prints one line per record. The record type and  event
110 	and this parameter is ignored when flags specifies XML format.
114 	pointers to the start of input and output buffers and their lengths.
119      print_audit() and print_audit_buf() return:
121      -1    on failure and set errno to indicate the error:
155      print_audit_xml_prolog_buf and print_audit_xml_ending_buf return:
157      -1    on failure and set errno to indicate the error:
163        The following code fragment takes audit input from stdin, and
169 	 * Format audit data from stdin and print to stdout.