On Thursday 14 August 2008 19:16:54 John Dennis wrote: > The "host" field was added to audit records almost a year ago, No, that was "node". "Host" has always been a field filled in by pam when someone is logging in. -Steve