mfauditadm command (deprecated)

Runs the Audit Manager Administration utility, which enables you to access, dump, and create reports for audit information generated by Enterprise Server.

Note: Audit Manager is deprecated and provided for backward compatibility only. We recommend that you use syslog events instead. See Enterprise Server Auditing for more information.

Restriction: This topic applies only when the Enterprise Server feature is enabled.

Important: Execute mfauditadm at the command line or in a batch file from a command prompt.

Syntax:

mfauditadm {[-n instance-name |
            [-p [-n instance-name | -f dump-audit-file]] |
            [-r [[-date yyyy/mm/dd] [-time hh.mm[.ss[.nnn]]
              [-c] [-d] [-o output-file-name] -f report-audit-file]
            [-d [-c] -f dump-audit-file]}

Parameters:

-n instance-name: Specifies the name of the audit event consolidator instance, which is the name that applications use to communicate with the audit event consolidator.
-p: Make the active audit file available for dumping.
-f report-audit-file: An audit file in the collection for which reports are to be generated.
-c: Generate a report for each available file in the collection.
-f dump-audit-file: The audit file to be dumped or to be made available for dumping.
-r: Generate a report.
-date yyyy/mm/dd: In the generated report file, include only events on the given date.
-time hh.mm[.ss[.nnn]]: In the generated report file, include only events from the given time.
-o output-file-name: Name of the report file to be created. If not specified, the report file name is derived from the report-audit-file name prefix, plus a .txt extension. For example, if report-audit-file filename is mfaudit.DOCTEST.aud_3, the report file created is mfaudit.DOCTEST.txt.
-d: Mark the file as dumped or mark each audit file available for dumping as dumped.

Examples:

See Related Tasks below.