Conditional logging of "Server"

[marcstern]

Each time a rule triggers and is logged, it generates a line in the audit log with the "Server".
This wastes a lot of disk space and is not interesting if you have a good configuration management.
We should have a directive (or a compile flag) to disable that logging.
Ex. of compile flag: #marcstern@9e68805

[csanders-git]

I think there are two areas to consider here - we already allow configuration of which audit areas you want to store. I will say however that i see your point. I think a compile time flag might be a pretty good solution ... how would this apply to JSON?

[marcstern]

A configuration directive (or option) is obviously more flexible, but I will obviously be OK with a compile time flag