What is cfauditdump?


cfauditdump is a dumper of cfengine audit database. cfauditdump reads a BerkeleyDB database file (typically /var/cfengine/cf_Audit.db) and prints its contents to STDOUT in YAML format.

Whole content is treated as a hash, where the key is timestamp of an entry. The value is another hash and consists of several fieldname-value pairs. Fields have names similar to cf_audit_entry_value structure.

cfauditdump was created for cfengine 2.x. It will probably work for cfengine 3.x, except for versions linked against Tokyo Cabinet (support for Tokyo Cabinet is a TODO).

See also:
How to enable auditing in cfengine?

Generated on Tue Mar 20 15:17:46 2012 for cfauditdump by  doxygen 1.5.6