showaudit(8)
System Administration 267
NAME showaudit - display the current auditing system state
SYNOPSIS showaudit
showaudit [all]
showaudit [-a users][-c classes][-e events][-g][-m][-p][-s][-t]
showaudit -h
DESCRIPTION showaudit(8) displays the current state of system auditing. When invoked without
options showaudit displays whether the writing of audit records is enabled or
disabled.
Privileges You must have auditadm or auditop privileges to run this command.
Refer to setprivileges(8) for more information.