WIP: HDFS audit parsing