I am trying to troubleshoot but cannot find anything that looks obvious in either my
 /var/log/audit/audit.log or my /var/log/messages files.

I am working on a Puppet Module to implement this stuff and I am not sure if I am running into a conflict of restarting the auditd service after either/both of the files /etc/audit/audit.rules or /etc/audit/auditd.conf are updated.

Thanks in advance,