ausearch returns "<no matches>" when executing from a cron, despite having events in the audit log
Issue
- When executing
ausearchcommand from a terminal, events are displayed, but not when executing the same command from a cronjob
Environment
- Red Hat Enterprise Linux 7 and later
- audit
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.