Disqualified - what happened?

Remove the | grep open -c

You’re looking for very specific audit failures now. You may have other audit errors that aren’t counted with this command.

Or he restarted the node since the error and the logs are gone.

I did restart the node ten hours ago, ran the above grep here are the results but i can’t figure out the cause,

Looks like you are missing files that are supposed to be there. I can’t tell you the cause, but the “file does not exist” part is pretty clear.