Hi Carlos,

>> Wow, what a find! Thanks, Joe.

>> .. msg=audit(30/09/22 13:32:02.446:6930) ...

>> Pity it doesn't print in ISO format. Tried:

Glad it was useful.

I noticed that your timestamps were coming out in dd/mm/yy format

When I run it the come out in mm/dd/yyyy format.

msg=audit(11/28/22 14:47:53.162:1143)

I don't have LC_TIME set but LC_CTYPE is set to 'en_US.UTF-8'.

I tried setting LC-CTYPE to your value but my results still came out the same as above.

Since you are getting a different format than I am though it leads me to believe that there must be some other setting which it is using which would get your desired result I just don't know what it is.

FYI, -i also converts uuid to account names.