FUJITSU M8000 - Manual (Page 173)

setaudit(8)
System Administration 151
The following are valid classes:
all Denotes all classes.
ACS_SYSTEM(1) System-related events
ACS_WRITE(2) Commands that can modify a state
ACS_READ(4) Commands that read a current state
ACS_LOGIN(8) Login-related events
ACS_AUDIT(16) Audit-related events
ACS_DOMAIN(32) Domain management–related events
ACS_USER(64) User management–related events
ACS_PLATFORM(128) Platform management–related events
ACS_MODES(256) Mode-related events
This option may be specified multiple times. Multiple specification are
processed together with an -e options in the order listed. See EXAMPLE 1.
When set to enable or disable, audit record generation for the classes is
turned on or off respectively. This setting overrides the global policy. When set
to default, the policy for the users is set to follow the global policy. Use
showaudit -g
to display the global user audit record generation policy.
-e events=enable|disable
Changes the audit record generation policy for the specified audit events.
events is a comma-separated list of audit events. An event may be specified by
its numeric value or its name. The AEV_ prefix may be omitted. For example,
the event for SSH login can be expressed as AEV_LOGIN_SSH, LOGIN_SSH or
0
.
See showaudit -e all for a list of valid events.
This option may be specified multiple times. Multiple specification are
processed together with an -c options in the order listed. See EXAMPLE 3.
When set to enable or disable, audit record generation for the events is
turned on or off respectively. This setting overrides the global policy. When set
to default, the policy for the users is set to follow the global policy. Use
showaudit -g
to display the global user audit record generation policy.