As of now there are so many proposed fields in the audit event log , if I wanted to one proposed field which is of not use as much ,which one can I chose for ? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/linux-audit/attachments/20160211/6dedb9f3/attachment.htm>