year value for ausearch?

Steve Grubb sgrubb at redhat.com
Mon May 3 16:33:20 UTC 2010


On Friday 30 April 2010 03:10:42 pm LC Bruzenak wrote:
> On Fri, 2010-04-30 at 10:24 -0400, Steve Grubb wrote:
> > Yes. It should be documented in the --start --end portion of the man
> > page. What the exact format is for the locale you are in is not covered.
> 
> Thanks Steve, I believe if I use the "%x" date switch I will get what I
> need for the ausearch input start time, regardless of the locale.

You can also do this on the command line:

LANG=en_US.UTF-8; ausearch --start 01/30/2010

-Steve




More information about the Linux-audit mailing list