This command allows tracing system calls and processes.
Syntax:autrace <program>
Sample output:
IPSManager> autrace /usr/bin/df
Waiting to execute: /usr/bin/df
Filesystem 1K-blocks Used Available Use% Mounted on
tmpfs 8209424 9244 8200180 1% /run
/dev/mapper/fs-root 34867872 1429900 31643720 5% /
/dev 8209424 0 8209424 0% /dev
tmpfs 8209424 0 8209424 0% /dev/shm
Cleaning up...
Trace complete. You can locate the records with 'ausearch -i -p 1586'