I am having trouble getting the

socket_events

table to work. Getting this in the log:

I0129 11:40:08.287317  8774 socket_events.cpp:187] Malformed syscall event. The saddr field in the AUDIT_SOCKADDR record could not be parsed: "00000000000000000000000000000000"

@Joshua Schmitt Hey, Did you get the solution for this issue? I am also facing the the same issue...

@Joshua Schmitt @manikant singh same here...