On Thursday 10 January 2008 12:41:00 Steve Grubb wrote: > And add a field at the end "res=1" since this doesn't appear to be able to > fail. Actually, I don't think this one is needed since its an ANOM event. They should be true always. I guess we just need a test of audit_enabled added. Thanks, -Steve