Elytron has the ability to create custom audit endpoints to develop your own audit logs. Nevertheless there is no configuration under the subsystem=elytron to configure a custom audit class (something like subsystem=elytron/custom-audit-log=example:add(... is needed).