Any pointers for troubleshooting  auditd missing events for file reads, edits, etc. ( -w _path_ -p raw) on OEL5/RHEL 5/CentOS 5?

http://security.stackexchange.com/q/89009/56827