security.auditd.plugins.<name>.direction

The option is dictated by the plugin. In or out are the only choices. You cannot make a plugin operate in a way it wasn't designed just by changing this option. This option is to give a clue to the event dispatcher about which direction events flow.

Inbound events are not supported yet.

Type
one of "in", "out"
Default
"out"
Declared
<nixpkgs/nixos/modules/security/auditd.nix>