diff --git a/log-qa-sto1-1.komreg.net/overlay/etc/rsyslog.d/99-audit.conf b/log-qa-sto1-1.komreg.net/overlay/etc/rsyslog.d/99-audit.conf
index 13fde3ef..4f6f3c83 100644
--- a/log-qa-sto1-1.komreg.net/overlay/etc/rsyslog.d/99-audit.conf
+++ b/log-qa-sto1-1.komreg.net/overlay/etc/rsyslog.d/99-audit.conf
@@ -1,4 +1,4 @@
-audit.*	        -/var/log/eidas_connector_audit.log
+user.*	        -/var/log/eidas_connector_audit.log
 local1.*	-/var/log/eidas_fticks.log
 local2.*	-/var/log/eidas_process.log
 $template messageOnlyProxy,"%msg%\n"
diff --git a/log-test-sto3-1.komreg.net/overlay/etc/rsyslog.d/99-audit.conf b/log-test-sto3-1.komreg.net/overlay/etc/rsyslog.d/99-audit.conf
index 56fd574c..6083ed16 100644
--- a/log-test-sto3-1.komreg.net/overlay/etc/rsyslog.d/99-audit.conf
+++ b/log-test-sto3-1.komreg.net/overlay/etc/rsyslog.d/99-audit.conf
@@ -1,4 +1,4 @@
-audit.*	        -/var/log/eidas_connector_audit.log
+user.*	        -/var/log/eidas_connector_audit.log
 local1.*	-/var/log/eidas_fticks.log
 local2.*	-/var/log/eidas_process.log
 local3.*        -/var/log/eidas_proxy.log