diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml
index 067f33c6..f29807c1 100644
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@@ -12,6 +12,7 @@ jmp.komreg.net:
    konsulter:
    sunet_iaas_cloud:
    autoupdate:
+   sunet::auditd:
 
 '^jump-.+\.komreg\.net$':
    konsulter: