move the logs to auditing
format the file