adjust short output of audit command to show custom events as custom