Summarize today's Linux Audit events
Build a paste-ready command, then review its compatibility and effects before running it.
ausearch --start today --raw | aureport --summaryread-onlyno known side effects Compatibility
LinuxVerified for Linux using posix, bash, zsh syntax.
Operational knowledgereview due 2027-01-20
Requirementsausearchausearch must be installed and available on PATH.
Version supportausearch Current supported releasesVerified for linux using posix, bash, zsh syntax; consult compatibility notes for platform-specific differences.
Expected signalsSummary ReportRepresentative successful output; values vary with the selected target and system state.
Known errorsausearch: command not foundausearch is missing or is not available on PATH.
Verifyausearch --start today --raw | aureport --summaryThe output matches the expected target and exits without an error.Rollback noteNot required: this command is read-only and does not change system state.
Command breakdown
01ausearchCommandRuns the ausearch stage of this one-liner.
02--startOptionConfigures ausearch with the --start option.
03todayArgumentPasses today to ausearch.
04--rawOptionConfigures ausearch with the --raw option.
05|PipelinePasses the output on the left to the command on the right.
06aureportCommandRuns the aureport stage of this one-liner.
07--summaryOptionConfigures aureport with the --summary option.
Example input
ausearch --start today --raw | aureport --summary
Example output
Summary Report
======================
Range of time in logs: 07/24/2026 00:00:01.123 - 07/24/2026 12:15:21.334
Selected time for report: 07/24/2026 00:00:00 - 07/24/2026 12:15:21
Number of changes in configuration: 2
Number of login events: 18
Illustrative output — exact values vary by system and data.
Official sources