Quick question... which, if any, of the "_events"...
# general
c
Quick question... which, if any, of the "_events" tables will work while the Linux audit daemon is running?