audit-viewer man page
audit-viewer — A graphical utility for viewing and summarizing audit events
audit-viewer [--unprivileged] SAVED...
audit-viewer is a GUI for viewing and summarizing audit events.
Tabs displaying specific configuration can be specified on the command line using one or more SAVED file names, each file should contain either a previously saved window layout or a previously saved configuration of a single tab.
If no SAVED files are specified, audit-viewer opens a simple unfiltered list of audit events.
Do not try to start the privileged audit-viewer-server back-end.
If this option is specified, only audit log files that are readable by the current user are available. This usually means that the system audit log files stored in /var/log/audit are not available.
audit-viewer usually exists with status 0. Non-zero exit status is returned if audit-viewer can not start the audit-viewer-server back-end or terminates unexpectedly.
The directory containing system log files.
ausearch-expression(5), aureport(8), ausearch(8)