audit_allow_fim_events does use audit events, righ...
# general
v
audit_allow_fim_events does use audit events, right?