---
auditd:
  space_left_action: email
  action_mail_acct: root
  admin_space_left_action: syslog
  max_log_file_action: keep_logs