/usr/share/doc/audit-2.8.5/rules/ Current File: //usr/share/doc/audit-2.8.5/rules/10-base-config.rules

## First rule - delete all
-D

## Increase the buffers to survive stress events.
## Make this bigger for busy systems
-b 8192

## Set failure mode to syslog
-f 1