[RFC] Virtual machine related events support

[Steve Grubb]

On Tuesday, December 06, 2011 03:31:21 PM Marcelo Cerri wrote:
> I'm already coding the auvirt tool and I'd like to add command line
> options similar to "--start" and "--end" from ausearch.
> 
> Looking into ausearch code I found two functions (ausearch_time_end and
> ausearch_time_start) that already parse date and time informed and
> support some interesting options as "now", "today", "week-ago" and etc.
> 
> Do you think there would be a problem in use these functions in auvirt?

Actually, that would be nice for consistency. But it sounds like you are headed 
towards calls to the search API to setup the time fields. Just to double check, 
is all this work is under the same license as the audit package is claiming? 
(LGPL/GPL). If so there's definitely not a problem.

-Steve