We run aureport -i on our rotated audit logs, rotation runs at 4 am. It works great on most systems but we have two servers that have an end date of 12/31/1969. Checked the date and resync'ed with NTP server and tried -t but still get the weird date. Thoughts?
David Flatley "To err is human. To really screw up requires the root password." -UNKNOWN -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
