audit: add fields to exclude filter by reusing user filter