# Auditbeat 7.3: Как добавить исключение auditd

**URL:** <https://discuss.elastic.co/t/auditbeat-7-3-auditd/205874>\
**Category:** Вопросы на русском языке\
**Created:** [October 30, 2019, 2:18pm UTC](https://discuss.elastic.co/t/auditbeat-7-3-auditd/205874 "2019-10-30T14:18:19Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![Igor\_Belyakov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_belyakov/32/52615_2.png) [@Igor\_Belyakov](https://discuss.elastic.co/u/Igor_Belyakov)\
**Post date:** [October 30, 2019, 3:31pm UTC](https://discuss.elastic.co/t/auditbeat-7-3-auditd/205874/3 "2019-10-30T15:31:32Z")

</div>

Игорь, спасибо за идею.  
Добавил процессор, но получил ошибку:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/8/d85283b7bdd2d818925c8d1f4b921f63c2e75cd7.png)

Но и тут я получил ошибку:  
"Exiting: error initializing processors: each processor must have exactly one action, but found 2 actions (drop\_event,when)"

---

_[View the full topic](https://discuss.elastic.co/t/auditbeat-7-3-auditd/205874)._