Set the Preferred Audit Store

Use this group policy to specify the preferred audit store that auditing will use in the event that your UNIX or Linux computer has IP addresses that match the criteria for multiple audit stores.

If you have this type of installation and you do not enable this policy and specify the preferred audit store, the collector may not connect to the correct audit store.

This group policy modifies the parameter preferred.audit.store in the agent configuration file.