1) ausearch_add_interpreted_item
2) ausearch_add_item
3) ausearch_add_timestamp_item
4) ausearch_add_timestamp_item_ex