Purpose
Create an audit selection filter for contexts and terminations that have the spf property set to on OR the sam property set to 10.10.0.3.
Action
Transaction = 202 {
Context = * {
ContextAudit {
ORLgc
},
AuditValue = * {
Audit {
Media {
LocalControl {
gm/spf=on,
gm/sam=10.10.0.3,
}
}
}
}
}
}
Meaning
The result of this audit is a list of terminations that have the spf property set to on or the sam property set to 10.10.0.3.