Hi again:
Following the thread:
I couldn't solve my problem, so I ask you again gurus:
I have this code:
nohup /usr/sbin/auditstream | /usr/sbin/auditselect -m -e "event== S_ENVIRON_WRITE || event== USER_Create || event== USER_Remove || event== USER_Change || event== GROUP_Create || event== GROUP_Remove || event== GROUP_Change || event== PASSWORD_Change" | /usr/sbin/auditpr -h elrtRc -t0 -v &
which makes the output:
USER_Create user user OK mkuser
israel
USER_Remove user user OK mkuser
israel
BUT I want to get this output (all on a single line) and I'm not able to do it:
USER_Create user user OK mkuser israel
USER_Remove user user OK mkuser israel
Can you help me to get the desired output?
Thanks once more.
Thanks