Auditbeat consuming lot of CPU

Did you try to enable a couple of directories first? I suppose you need to perform a "binary search" exercise to find out which directory causes a heavy CPU load.