DJ Delorie wrote: > The net result is to aggregate audit logs from many systems onto one > central audit server. Remote audit messages have the new "node=" tag > on them so you know where they came from. > The field name was "host", is the "node=" a typo or did the field name change? -- John Dennis <jdennis at redhat.com>