[moonman272]

Could you tell us more about how you did your auditing? Did you add more logging?

[rdtsc]

Yap it was done using the logging facility with a separate rotation, log forwarding rules, and such.