When running "ausearch -i", does this read both the /var/log/audit/audit.log and the rotated log files in the same directory? Thanks. David Flatley "To err is human. To really screw up requires the root password." -UNKNOWN