Command Auditing

Command auditing is a way of:

• Notifying users about critical actions they are about to take
• Obtaining confirmation for critical actions
• Creating forensic logs

If users confirm the action, they are requested to supply their names and a reason for running the command. If the command affects a critical device or a process (pnote) a second confirmation may be required.

For example, if you use administrative privileges to change the state of a SGM to DOWN the output looks like this:

To view the audit logs, run asg log audit: