fix: incorrect behavior in audit logs during stop and start of EMQX

apps/emqx_ctl/src/emqx_ctl.erl

@@ -336,18 +336,25 @@ audit_log(Level, From, Log) ->
         {error, _} ->
             ignore;
         {ok, {Mod, Fun}} ->
+            case prune_unnecessary_log(Log) of
+                false -> ok;
+                {ok, Log1} -> apply_audit_command(Log1, Mod, Fun, Level, From)
+            end
+    end.
+
+apply_audit_command(Log, Mod, Fun, Level, From) ->
     try
-                apply(Mod, Fun, [Level, From, normalize_audit_log_args(Log)])
+        apply(Mod, Fun, [Level, From, Log])
     catch
         _:{aborted, {no_exists, emqx_audit}} ->
             case Log of
-                        #{cmd := cluster, args := ["leave"]} ->
+                #{cmd := cluster, args := [<<"leave">>]} ->
                     ok;
                 _ ->
                     ?LOG_ERROR(#{
                         msg => "ctl_command_crashed",
                         reason => "emqx_audit table not found",
-                                log => normalize_audit_log_args(Log),
+                        log => Log,
                         from => From
                     })
             end;
@@ -356,10 +363,15 @@ audit_log(Level, From, Log) ->
                 msg => "ctl_command_crashed",
                 stacktrace => Stacktrace,
                 reason => Reason,
-                        log => normalize_audit_log_args(Log),
+                log => Log,
                 from => From
             })
-            end
+    end.
+
+prune_unnecessary_log(Log) ->
+    case normalize_audit_log_args(Log) of
+        #{args := [<<"emqx:is_running()">>]} -> false;
+        Log1 -> {ok, Log1}
     end.
 
 audit_level(ok, _Duration) -> info;

apps/emqx_machine/src/emqx_machine_terminator.erl

@@ -69,7 +69,7 @@ graceful() ->
 graceful_wait() ->
     ?AUDIT(alert, #{
         cmd => emqx,
-        args => ["stop"],
+        args => [<<"stop">>],
         version => emqx_release:version(),
         from => cli,
         duration_ms => element(1, erlang:statistics(wall_clock))