ausearch

Search audit logs

low risk

interactive breakdown — edit the command and press Explain
$ 
What it does

Query auditd logs by key, type or time. See the flags and examples below, and run `man ausearch` for the full reference.

Common flags
FlagMeaning
-mMessage type
-tsStart time
-kKey
Examples
ausearch -m avc -ts recentRecent SELinux denials · explain & risk-check →
Related
auditctl selinux
Open the full explainer →More in System & Processes

Reference text is hand-written and may be incomplete — check man ausearch for your version. Test destructive commands on a non-production system first.