Someone might look for this info in the future...

AUDIT_ADD_GROUP   " User space group added "
AUDIT_ADD_USER   " User space user account added "
AUDIT_ANOM_ABEND   " Process ended abnormally “
...