Audit files that are complete have names of the following form:
start-time.end-time.system |
Is the time that the first audit record in the audit file was generated
Is the time that the last record was written to the file
Is the name of the system that generated the file
An audit file that is still active has a name of the following form:
start-time.not_terminated.system |
For examples of not_terminated and closed audit file names, see How to Clean Up a not_terminated Audit File.