QUESTION:
How to use seaudit Utility (Display Audit Log Records) with the string now to set the time as now?
(You can also use the string now followed by - (minus) and a number. This defines the time as the specified number of
minutes before now. For example, now-60 means that the time is sixty minutes (one hour) ago.)
ANSWER:
Examples:
1)on LINUX/UNIX Privileged Identity Manager (PIM) Endpoint under a putty SSH session as "root":
Using username "root".
# date
Tue Feb 2 17:08:13 IST 2016
# /opt/CA/AccessControl/bin/seaudit -a -st now
CA ControlMinder seaudit v12.81.0.1912 - Audit log lister
Copyright (c) 2013 CA. All rights reserved.
02 Feb 2016 17:08:12 P SURROGATE root Read 1059 2 USER.postfix /usr/libexec/postfix/master root
02 Feb 2016 17:08:16 P PROGRAM root Exec 57 2 /opt/CA/AccessControl/bin/seaudit /bin/bash root
Total records displayed 2
#
2)On window Privileged Identity Manager (PIM) Enterprise Management Server under a window "Command prompt" session:
C:\Windows\system32>echo %time%
14:12:04.87
C:\Windows\system32>secons -s
CA ControlMinder secons v12.91.0302 - Console utility
Copyright (c) 2013 CA. All rights reserved.
CA ControlMinder is now DOWN !
C:\Windows\system32>echo %time%
14:13:01.15
C:\Windows\system32>"C:\Program Files\CA\AccessControlServer\APMS\AccessControl\bin\"seaudit -a -st now-1""
seaudit - Audit log lister
10 Feb 2016 14:12:26 M SHUTDOWN user 452 seosd
Total records displayed 1