selinux_events

Track SELinux events.

Platform support

Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: selinux_events

  • Linux

Table schema

Name

Type

Description

type

TEXT

Event type

message

TEXT

Message

time

BIGINT

Time of execution in UNIX time

uptime

BIGINT

Time of execution in system uptime

eid

TEXT

Event ID

Query examples

Select all the results for the given table.

SELECT * FROM selinux_events;