//opt/splunkforwarder/etc/system/README/audit.conf.example
Coder : AnonymousFox