Audit File Naming

Audit files that are complete have names of the following form:

start-time.finish-time.machine 

where

• start-time – Is the time that the first audit record in the audit file was generated.

• finish-time – Is the time that the last record was written to the file.

• machine – Is the name of the machine that generated the file.

For an example of these names, see Example of a Closed Audit File Name.

An audit log file that is still active has a name of the following form:

start-time.not_terminated.machine