HP-UX Host Intrusion Detection System Version 4.1 Administrator's Guide

Example C-9 To generate a report listing only the critical alerts for all agents listed in
the sentinal.hosts file starting from January 01 2007, and to display the report in
raw format using commas to delimit alert fields
/opt/ids/bin/idsadmin –r –a abc.hp.com,xyz.hp.com
--alert-severities critical --report-format raw
--report-delimiter , --start-date 20070101
Example C-10 5. To generate a report for all agents listing only alerts related to failed
logins, logouts, and failed su attempts. The report is emailed to the specified email
address with a customized message and subject line.
/opt/ids/bin/idsadmin –r --alert-events flogin, logout, fsu
--email-to [e-mail] --email-message “HIDS Alert
Report Generated” --email-subject “Report Dated Mar 23
2007”
Generating Alert Reports Using the idsadmin Command 235