in order to keep json logs consistent the security audit logs are renamed from .log to .json relates #32850