Auditd logs into Logstash with separation of fields.