On Friday 12 September 2008 19:56:08 LC Bruzenak wrote: > Just as an aside, I was sending in the auditctl event because I do not > see the "node=" information in the ausearch results on my collector. > So I wasn't certain which machine might be initiating the event. That was fixed yesterday afternoon in: https://fedorahosted.org/audit/changeset/98 -Steve