work praudit with tee & grep

[Robert Watson]

On Mon, 20 Aug 2007, sam wrote:

> I am installed AUDIT
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/audit.html
>
> # praudit /etc/auditpipe | grep "xxx"
> &
> # praudit /etc/auditpipe | tee file.log
> &
> # praudit /etc/auditpipe > file.log
>
> this is not work
> please help me

Vladimir,

Could you confirm that when you typed the command, you entered it as above 
instead of using /dev/auditpipe, the actual name of the audit device?  I think 
all the examples in the Handbook are correct, suggesting a transcription error 
either when you typed the command, or when you copied it to the e-mail.  If 
that's not it, could you be more specific about the failure mode?

Robert N M Watson
Computer Laboratory
University of Cambridge