My Oracle Support Banner

Oracle Linux: Audit Rules to Log Reboot Command Executions (Doc ID 2094229.1)

Last updated on SEPTEMBER 25, 2020

Applies to:

Linux OS - Version Oracle Linux 5.0 and later
Oracle Cloud Infrastructure - Version N/A and later
Linux x86-64
Linux x86


 The purpose of this document is to provide a sample audit rule to capture the user credentials and command used to reboot/shutdown the linux servers and this rule can be modified as required. 

 Refer this document 555070.1 to understand the functionality of auditd service.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.