On Thursday, July 14, 2016 10:22:30 AM EDT Chris Nandor wrote: > How does one get USER_CMD records into the audit.log? The sudo command is the usual way. -Steve