year value for ausearch?
Steve Grubb
sgrubb at redhat.com
Mon May 3 16:33:20 UTC 2010
On Friday 30 April 2010 03:10:42 pm LC Bruzenak wrote:
> On Fri, 2010-04-30 at 10:24 -0400, Steve Grubb wrote:
> > Yes. It should be documented in the --start --end portion of the man
> > page. What the exact format is for the locale you are in is not covered.
>
> Thanks Steve, I believe if I use the "%x" date switch I will get what I
> need for the ausearch input start time, regardless of the locale.
You can also do this on the command line:
LANG=en_US.UTF-8; ausearch --start 01/30/2010
-Steve
More information about the Linux-audit
mailing list