Audit messages being spammed to root login

hi,

can you try setting: ForwardToWall=no in /etc/systemd/journald.conf ?