hey everyone. hoping for some assistance where I am trying to show syslog events where the process is sudo, su and any elevation attempt and not having much success. Its not showing in the asl table via something like

select * from asl where sender='sudo'

. Any advice is helpful.