The audit files are merged into a single audit trail in time order. Although the entire audit trail is analyzed, audisp allows you to limit the information displayed, by specifying options. This command is restricted to privileged users.
Any unspecified option is interpreted as an unrestricted specification.
For example, a missing -u username option causes all users' audit information in the audit trail to be displayed as long as it satisfies all other specified options. Specifying an option without its required parameter results in error. For example, specifying -e without any eventname returns with an error message. Display audit information of the specified event types. Display only successful operations that were recorded in the audit trail.