type:PATH (name:\/etc\/audit\/* OR name:\/etc\/libaudit.conf OR name:\/etc\/audisp\/*)