I don't see any timestamps on audit events. How can I bracket events between
to dates /times?