oh I see it is working, my fault
in the output I posted above, the year ist missing, the last column should be the year
host3 /etc/passwd changed Thu Dec 27 12:47:29 2007
host4 /etc/passwd changed Thu Dec 27 12:28:13 2007
host3 /etc/passwd changed Thu Dec 27 12:13:29 2007
host1 /etc/passwd changed Thu Dec 27 12:05:58 ...
host5 /etc/passwd changed Thu Dec 27 12:00:57 ...
host8 /etc/passwd changed Thu Dec 27 11:50:40
host7 /etc/security/user changed Thu Dec 27 10:34:27
host6 /etc/group changed Thu Dec 27 10:34:27
host3 /etc/security/user changed Fri Dec 21 12:25:23
host10 /etc/group changed Thu Jan 10 09:59:01
host2 /etc/security/user changed Tue Jan 8 13:15:02
host11 /etc/group changed Thu Jan 3 18:55:38 2008
host17 /etc/group changed Thu Jan 3 17:45:41 2008
host3 /etc/group changed Thu Jan 3 16:39:48 ...
host2 /etc/services changed Thu Jan 3 16:39:48
host16 /etc/passwd changed Thu Jan 3 16:39:48
great work vgersh99, perhaps you can modify your script, to sort after the year too?
cheers