Comment 3 for bug 1913228

in my research of this bug, i did discover the filebeat charm has a fixed path to `/root/cdk/audit/*.log` baked into its template files. Perhaps this is better provided over a relation as to which files are important for including in the filebeat path.

https://git.launchpad.net/filebeat-charm/tree/templates/filebeat-5.yml#n11

Needless to say, moving the audit log would break filebeats.