- Can we show all events for specific class?
- Can we show all events for specific user to every resource of specific class?
- Yes, it is possible.
seaudit -r <Class> "resource" "user"
seaudit -f FILE "*" "*"
The command will show all events for FILE class.
seaudit -r FILE "*" "test01"
The command will show all events which accessed to resource of FILE class by user(test01).
Please check reference guide of CA PIM(CA Privileged Identity Manager) for seaudit command.