From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: year value for ausearch? Date: Mon, 3 May 2010 12:33:20 -0400 Message-ID: <201005031233.21040.sgrubb@redhat.com> References: <1272519566.12625.259.camel@lcb> <201004301024.32901.sgrubb@redhat.com> <1272654642.8625.107.camel@lcb> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1272654642.8625.107.camel@lcb> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: LC Bruzenak Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Friday 30 April 2010 03:10:42 pm LC Bruzenak wrote: > On Fri, 2010-04-30 at 10:24 -0400, Steve Grubb wrote: > > Yes. It should be documented in the --start --end portion of the man > > page. What the exact format is for the locale you are in is not covered. > > Thanks Steve, I believe if I use the "%x" date switch I will get what I > need for the ausearch input start time, regardless of the locale. You can also do this on the command line: LANG=en_US.UTF-8; ausearch --start 01/30/2010 -Steve