CA Privileged Identity Manager - seaudit Utility (Display Audit Log Records) with the string now to set the time as now.

book

Article ID: 37953

calendar_today

Updated On:

Products

CA Virtual Privilege Manager CA Privileged Identity Management Endpoint (PIM) CA Privileged Access Manager (PAM)

Issue/Introduction

QUESTION:

How to use seaudit Utility (Display Audit Log Records) with the string now to set the time as now?
(You can also use the string now followed by - (minus) and a number. This defines the time as the specified number of
minutes before now. For example, now-60 means that the time is sixty minutes (one hour) ago.)
 
ANSWER:

Examples:

1)on LINUX/UNIX Privileged Identity Manager (PIM) Endpoint under a putty SSH session as "root":

Using username "root".
# date
Tue Feb  2 17:08:13 IST 2016
# /opt/CA/AccessControl/bin/seaudit -a -st now
CA ControlMinder seaudit  v12.81.0.1912 - Audit log lister
Copyright (c) 2013 CA. All rights reserved.
02 Feb 2016 17:08:12 P SURROGATE    root       Read     1059  2 USER.postfix         /usr/libexec/postfix/master                   root
02 Feb 2016 17:08:16 P PROGRAM      root       Exec       57  2 /opt/CA/AccessControl/bin/seaudit /bin/bash                        root

Total records displayed 2
#

2)On window Privileged Identity Manager (PIM) Enterprise Management Server under a window "Command prompt" session:

C:\Windows\system32>echo %time%
14:12:04.87

C:\Windows\system32>secons -s
CA ControlMinder secons v12.91.0302 - Console utility
Copyright (c) 2013 CA. All rights reserved.

CA ControlMinder is now DOWN !

C:\Windows\system32>echo %time%
14:13:01.15

C:\Windows\system32>"C:\Program Files\CA\AccessControlServer\APMS\AccessControl\bin\"seaudit -a -st now-1""
seaudit - Audit log lister
10 Feb 2016 14:12:26 M SHUTDOWN     user               452 seosd

Total records displayed 1
 

Environment

Release: ACP1M005900-12.9-Privileged Identity Manager
Component: