How to associate Solaris Audit log Session ID number and processes (Doc ID 3023536.1)

Last updated on MAY 17, 2024

Applies to:

Goal

We can see some session numbers in the audit.log outputs and want to understand how to associate these numbers with certain processes.

----------------------------------
The following information is seen in the audit log:

Questions:

1) The group is incorrect as <USER1> not in <USER2>:<GROUP2>

2) How can we understand the connection between the audit log 10-digit session number (e.g., 4012413006) and certain Solaris processes (e.g., ssh)?
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.