multi_platform_all Verify 'log_file' is not set in /etc/audit/auditd.conf. /etc/audit/auditd.conf ^(log_file\s*=\s*.*)$ 1