In the first item, I am working with R&D on formally addressing, but the workaround is the following.
Manually edit the CFG file and change
<keywords>
<string>Audit Success</string>
<string>Audit Failure</string>
</keywords>
To
<keywords>
<string>0x20000000000000</string>
<string>0x10000000000000</string>
</keywords>