CA Privileged Identity Manager - seaudit Utility (Display Audit Log Records) with the string now to set the time as now.

Article Id: 37953

Status: Published

Updated On: 14-02-2018 07:36

Legacy Id: TEC1422503

Products:

CA Virtual Privilege Manager , CA Privileged Identity Management Endpoint (PIM) , CA Privileged Access Manager (PAM)

Issue/Introduction:

QUESTION:

How to use seaudit Utility (Display Audit Log Records) with the string now to set the time as now?
(You can also use the string now followed by - (minus) and a number. This defines the time as the specified number of
minutes before now. For example, now-60 means that the time is sixty minutes (one hour) ago.)

ANSWER:

Examples:

1)on LINUX/UNIX Privileged Identity Manager (PIM) Endpoint under a putty SSH session as "root":

Using username "root".
# date
Tue Feb 2 17:08:13 IST 2016
# /opt/CA/AccessControl/bin/seaudit -a -st now
CA ControlMinder seaudit v12.81.0.1912 - Audit log lister
Copyright (c) 2013 CA. All rights reserved.
02 Feb 2016 17:08:12 P SURROGATE    root       Read     1059 2 USER.postfix         /usr/libexec/postfix/master                   root
02 Feb 2016 17:08:16 P PROGRAM      root       Exec       57 2 /opt/CA/AccessControl/bin/seaudit /bin/bash                        root

Total records displayed 2
#

2)On window Privileged Identity Manager (PIM) Enterprise Management Server under a window "Command prompt" session:

C:\Windows\system32>echo %time%
14:12:04.87

C:\Windows\system32>secons -s
CA ControlMinder secons v12.91.0302 - Console utility
Copyright (c) 2013 CA. All rights reserved.

CA ControlMinder is now DOWN !

C:\Windows\system32>echo %time%
14:13:01.15

C:\Windows\system32>"C:\Program Files\CA\AccessControlServer\APMS\AccessControl\bin\"seaudit -a -st now-1""
seaudit - Audit log lister
10 Feb 2016 14:12:26 M SHUTDOWN     user               452 seosd

Total records displayed 1

Environment:

Release: ACP1M005900-12.9-Privileged Identity Manager
Component: