On Tuesday, November 15, 2011 04:53:34 PM artem wrote: > do not tell where I can find a complete list "Audit Event Record Types" ausearch -m 2>&1 | tr ' ' '\n' | grep '[A-Z]$' | sort This will alphabetize all types and output them. If you want some description, you will want to look in /usr/include/libaudit.h and /usr/include/linux/audit.h -Steve