Comment 30 for bug 388746

The event should be queued in the kernel if you boot with audit=1. And the way I check the results is by running aulast. Thanks.