.Rule-based filtering and forwarding of Audit events With the new `audisp-filter` plugin, you can suppress specific Audit events based on custom `ausearch` expressions in a flexible way, which should reduce unnecessary output to downstream plugins. This plugin acts as a bridge between Audit and other plugins. It filters out certain Audit events and forwards only those events that correspond to the rules specified in the configuration file. As a result, you can selectively filter Audit events by using allowlist or blocklist modes. Each plugin that uses the `audisp-filter` can define its own configuration file that contains matching rules. One common use case is to exclude noisy or irrelevant Audit events and forward only significant events to the syslog plugin. This allows the filtered events to be logged by syslog, making Audit logs more manageable.