As root on a policy server run the following command:
# pmlog --result Reject
Reject 2015-10-08 15:15:11 root@gbpm4spol.i.ts.hal.ca.qsft
_v
Reject 2018-05-04 15:09:42 gboudreau@gb-rh-6.idm.hal.lab
su -
Reject 2018-05-04 15:10:15 gboudreau@gb-rh-6.idm.hal.lab
/opt/quest/bin/vastool -v
Reject 2018-05-04 15:10:25 gboudreau@gb-rh-6.idm.hal.lab
/opt/quest/bin/vastool info servers
You can also run pmlog with no flags to see the full list of accepted and rejected sudo commands.
[root@gbpm4spol events]# pmlog
Reject 2015-10-08 15:15:11 root@gbpm4spol.i.ts.hal.ca.qsft
_v
Accept 2018-05-02 12:26:51 gboudreau@gb-rh-6.idm.hal.lab -> root@gb-rh-6.idm.hal.lab
/opt/quest/bin/vastool status
Command finished with exit status 0
Accept 2018-05-04 15:09:24 gboudreau@gb-rh-6.idm.hal.lab -> root@gb-rh-6.idm.hal.lab
/opt/quest/bin/vastool status
Command finished with exit status 0
Reject 2018-05-04 15:09:42 gboudreau@gb-rh-6.idm.hal.lab
su -
Reject 2018-05-04 15:10:15 gboudreau@gb-rh-6.idm.hal.lab
/opt/quest/bin/vastool -v
Reject 2018-05-04 15:10:25 gboudreau@gb-rh-6.idm.hal.lab
/opt/quest/bin/vastool info servers