prefer.site.over.subnet
When the audit and monitoring service is running on a system and it needs to connect to an audit store, you can use this prefer.site.over.subnet parameter to specify the search precedence.
If you set this parameter to true, then the agent looks for an audit store based on the Active Directory sites. If the search fails, then the agent looks for an audit store based on the subnet.
By default, this parameter is false, which means that audit stores are chosen first based on their subnet addresses and then based on the Active Directory sites.
For example:
prefer.site.over.subnet: true