ausearch-expression(5) on Linux
The text 4924e3fa5dde, as Debian 7 (Wheezy), Debian 6.0 (Squeeze), Debian 5.0 (Lenny) shipped it.
audit search expression format
The text 4924e3fa5dde, as Debian 7 (Wheezy), Debian 6.0 (Squeeze), Debian 5.0 (Lenny) shipped it.
audit search expression format