Search the Audit Log
~~~~~~~~~~~~~~~~~~~~

At the prompt, enter a search-string to search for in the audit
log. Enter a single \% to display all entries.

::

    You can search for User-ID, User-ID2, Object-ID, Vault-ID, Event or IP-addresses.
    (Search will be done in all those fields simultaneous)
    
    Use % as wildcard, e.g. "%POLICY%" or "%USERS%DEACTIVATED%" or
    search for the specific Object-ID "12623".

    NB: All results will be raw, User-IDs etc are numerical, since this function is just meant
    to aid in troubleshooting and hence lacks the bells and whistles the Audit function in the WebUI.
    
    Search Audit Log for (Use % as wildcard, User/Object/Vault-ID, Q to Quit) <%>: %USERS%DEACTIVATED%
    stamp               usr     obj     vlt     usr2    event                                                            ip
    2021-01-06 01:24:01 0       0       0       0       SYSTEM - USERS TOTAL: 147 (ACTIVE: 123, DEACTIVATED USERS: 24)   127.0.0.1
    2021-01-05 01:24:01 0       0       0       0       SYSTEM - USERS TOTAL: 147 (ACTIVE: 123, DEACTIVATED USERS: 24)   127.0.0.1
    2021-01-04 01:24:01 0       0       0       0       SYSTEM - USERS TOTAL: 147 (ACTIVE: 123, DEACTIVATED USERS: 24)   127.0.0.1
    2021-01-03 01:24:01 0       0       0       0       SYSTEM - USERS TOTAL: 147 (ACTIVE: 123, DEACTIVATED USERS: 24)   127.0.0.1
    2021-01-02 01:24:01 0       0       0       0       SYSTEM - USERS TOTAL: 147 (ACTIVE: 123, DEACTIVATED USERS: 24)   127.0.0.1
    2021-01-01 01:24:01 0       0       0       0       SYSTEM - USERS TOTAL: 147 (ACTIVE: 123, DEACTIVATED USERS: 24)   127.0.0.1
    2020-12-31 01:24:01 0       0       0       0       SYSTEM - USERS TOTAL: 147 (ACTIVE: 123, DEACTIVATED USERS: 24)   127.0.0.1
    Continue? (<Y>/n): n

    Press any key to continue