The format of the name of a closed audit log file is shown below:
YYYYMMDDHHMMSS.YYYYMMDDHHMMSS.hostname
19970320005243.19970327225351.patchwork
The example above was started in 1997, on March 20, at 12:52:43 AM, GMT. The file was closed March 27, at 10:53:51 PM, GMT. The name patchwork at the end is the host name of the workstation whose audit data is being collected.