Ensure the audispd's remote logging daemon direction is correct
Ubuntu 22.04
Ensure 'direction' is configured with value 'out' in /etc/audit/plugins.d/au-remote.conf
/etc/audit/plugins.d/au-remote.conf
^\s*direction\s*=\s*(.+?)[ \t]*(?:$|#)
1
^out$
^/etc/audit/plugins.d/au-remote.conf