SELinux log records

[Trevor]

Write the command that will list all SELinux log records that contain
to the following SELinux label:    system_u:object_r:httpd_log_t:s0

[Tracy_Baker]

This may depend on whether auditd is running or not (by default it is).

If it is:

# grep 'system_u:object_r:httpd_log_t:s0' /var/log/audit/audit.log

If it isn't (you can search here, too, anyway):

# grep 'system_u:object_r:httpd_log_t:s0' /var/log/messages

You can also look here:

# journalctl | grep 'system_u:object_r:httpd_log_t:s0'

[Trevor]

There you go flexing again Tracy

What I was trying to lead folks in the direction of was:

#  journalctl      _SELINUX_CONTEXT=system_u:object_r:httpd_log_t:s0

Thanks for your extra spices.  Once again, you've proven, there's more ways
than one to skin a cat!!!!