# audit

Kernel Parameters:

```ini
audit=1 audit_backlog_limit=8192
```

This prevents the message

```shell
kauditd: hold queue overflow
```