Not only that, but the official policies rely on dontaudit rules because there are known policy violations that are in fact harmless (like processes scanning en

Not only that, but the official policies rely on dontaudit rules because there are known policy violations that are in fact harmless (like processes scanning entire directories, or attempting to open a file in various locations). So disabling dontaudit means your logs will get cluttered with non-related error messages that were up to then silently ignored.