active = yes
direction = out
path = /usr/libexec/auditd-plugin-clickhouse
type = always
args = /etc/audisp/auditd-clickhouse.conf
format = string