audit count doesn't make much sense?

I am using the script to get my audit count, shouldn’t it always be increasing? How can it bounce around like this.

The script counts audits from the log. If you restart the node, the log is deleted (unless you configured to save it) and number of audits go back to zero.
I also think that by default docker deletes old logs, so the count goes down as the logs are deleted.
If you want to graph number of audits, you should just use the API.

1 Like

Ah, so its just docker deleting old logs then that cases decrease. Thanks I will use the api then.