Hi, I have a prelude HOWTO started here: http://people.redhat.com/sgrubb/audit/prelude.txt I'm just missing the final apache configuration, which I should get to in the next day or so. This should be good enough for anyone to find out what prelude can do since you can run prewikka by hand to test with. If you are testing with rawhide right now, you have to put selinux in permissive mode since this is new behaviors of the audit daemon, -Steve