To Read a Current Audit File

Use the tail(1) command to see what is currently being written to an active audit file.

$ praudit | tail -40 19970401000000.not_terminated.grebe

This displays the latest 40 tokens that were recorded to standard output.