Lenny: I was going to move the rotated logs into /home/logs and use "ausearch -i -f /home/logs". David Flatley CISSP -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/linux-audit/attachments/20090817/4deeb089/attachment.htm>