Can it be possible to add new field to auditd.conf file? 

-Deepika