Some audit logs do not show on remote syslog server

I have set up a syslog HSL filter/destination which sends ALL syslogs including audit logs to a logstash server. The data is showing there, but it seems that no all of the audit log data is sent. Mo...