diff --git a/scripts/log-collect.sh b/scripts/log-collect.sh
index dad7c46b2c..48eceb69db 100755
--- a/scripts/log-collect.sh
+++ b/scripts/log-collect.sh
@@ -38,6 +38,7 @@ export RSYNC_CMD="rsync --archive --copy-links --ignore-errors --quiet --no-perm
 #                  easy for folks to find and adjust items as needed.
 COMMON_ETC_LOG_NAMES="apt \
     apache2 \
+    auditd \
     calico \
     ceph \
     haproxy \