audit trail format & audisp

[Systeemingenieurs Infoc]

Hi,

I've been thru the archives and I have the following FAQ (which had so little answers) :

Can anyone produce readable & usable loggings thru an audisp ?

Has anyone written his own extractor (you're my
hero if you can decode "man 4 audit") ?

Can parameters (eg. /usr/sbin/useradd -u 2345 -g users -d /users/testusr -m testusr) be extracted from the audits ? In an audisp, the only parameter that makes sense to me is the executed program itself.