The log outputted to audit.log is difficult to parse, since it uses spaces as delimiters, but there can be spaces in the fields.
If we could have alternate delimiters, it would be much easier to parse the output, for example in logstash.