Understanding the Audit Log: In Purity, accountability and security are maintained through the Audit Log. This log captures every administrative action taken on the array, whether through the GUI, CLI, or REST API. It records who performed the action, what the action was (e.g., volume creation, host deletion), and when it occurred.
The CLI Command: The command pureaudit list is the specific CLI tool used to display these logs. By default, it lists events in chronological order, making it the perfect tool for an administrator to review "shift change" activities.
Command Options: * pureaudit list can be filtered with flags like --user to see actions by a specific admin, or --start-time and --end-time to narrow down the "previous shift" window.
Why Option C is incorrect: puremessage (accessed via puremessage list) is used to view Alerts and Notifications generated by the system (e.g., a failed drive or a high-temperature warning). While it tells you what the array did, it does not track what users did.
Why Option A is incorrect: This is not a valid Purity command syntax. Purity does not use double-dashes to "pipe" or combine independent commands like pureaudit and puremessage in that manner.