Hi, From what I understood if we want to use Linux Auditing events tables the auditd daemon cannot be running, is that correct?