# Here you can specify a list of ausearch-expression(8)
#
# In allowlist mode, the plugin forwards everything except
# for events that match the specified ausearch expressions.
# In blocklist mode, it refrains from forwarding anything
# except for events matching these expressions.
# See audisp-filter