I don't see any timestamps on audit events. How can I bracket events between to dates /times? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060503/49b2e0e4/attachment.htm>