SRG-OS-000054-GPOS-00025
The operating system must provide the capability to filter audit records for events of interest based upon all audit fields within audit records.
The operating system must provide the capability to filter audit records for events of interest based upon all audit fields within audit records.