Type string READONLY
alertdate contains the date when a configured alert was matched by pmlocald. It is not available for use in the policy file, it is set in the event log. To view the event log, use the pmlog -l command.
#display all alerts raised with action set to log pmlog -l -c 'alertkeyaction == "log"'
Type string READONLY
alerttime contains the time when a configured alert was matched by pmlocald. It is not available for use in the policy file, it is set in the event log. To view the event log, use the pmlog command.
#display all alerts raised after 6pm pmlog -l -c 'alerttime > "18:00:00"'
Type string READONLY
event identifies the type of event logged by the policy server process. An event is logged when the policy server accepts or rejects a command.
Possible values are:
Accept
Reject
Finish
AlertRaised
This value is saved in the event log and can be viewed using pmlog.
#Display all accepted events from the audit log pmlog -c 'event == "Accept"'
Type string READONLY
exitdate is the date the requested command finished running. This is saved in the event log when the session exits, and can be viewed using pmlog.
#Display all events that finished on 15 january 2009 pmlog -c 'exitdate == "2009/01/15"'
© 2024 One Identity LLC. ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center
