I don’t have by any chance any followers that forward auditd-logs to logstash via rsyslog, do I?