Redirecting you to Reddit in 5 seconds:
https://old.reddit.com/r/sysadmin/comments/19aisb4/having_trouble_with_linux_audit_rules