diff --git i/audisp/plugins/af_unix/af_unix.conf w/audisp/plugins/af_unix/af_unix.conf
index 081dcb67..df995a65 100644
--- i/audisp/plugins/af_unix/af_unix.conf
+++ w/audisp/plugins/af_unix/af_unix.conf
@@ -6,7 +6,7 @@
 
 active = no
 direction = out
-path = /sbin/audisp-af_unix
+path = /usr/bin/audisp-af_unix
 type = always
-args = 0640 /var/run/audispd_events
+args = 0640 /run/audispd_events
 format = string
diff --git i/audisp/plugins/ids/audisp-ids.conf w/audisp/plugins/ids/audisp-ids.conf
index ce5521c4..2d509025 100644
--- i/audisp/plugins/ids/audisp-ids.conf
+++ w/audisp/plugins/ids/audisp-ids.conf
@@ -3,7 +3,7 @@
 
 active = no
 direction = out
-path = /usr/sbin/audisp-ids
+path = /usr/bin/audisp-ids
 type = always 
 args = 1
 format = string
diff --git i/audisp/plugins/remote/au-remote.conf w/audisp/plugins/remote/au-remote.conf
index d75e6b64..73814875 100644
--- i/audisp/plugins/remote/au-remote.conf
+++ w/audisp/plugins/remote/au-remote.conf
@@ -5,7 +5,7 @@
 
 active = no
 direction = out
-path = /sbin/audisp-remote
+path = /usr/bin/audisp-remote
 type = always
 #args =
 format = string
diff --git i/audisp/plugins/statsd/au-statsd.conf w/audisp/plugins/statsd/au-statsd.conf
index a1fd4be3..3aa2174d 100644
--- i/audisp/plugins/statsd/au-statsd.conf
+++ w/audisp/plugins/statsd/au-statsd.conf
@@ -3,7 +3,7 @@
 
 active = no
 direction = out
-path = /sbin/audisp-statsd
+path = /usr/bin/audisp-statsd
 type = always 
 # args =
 format = string
diff --git i/audisp/plugins/syslog/syslog.conf w/audisp/plugins/syslog/syslog.conf
index e8aebdfe..ab12489b 100644
--- i/audisp/plugins/syslog/syslog.conf
+++ w/audisp/plugins/syslog/syslog.conf
@@ -8,7 +8,7 @@
 
 active = no
 direction = out
-path = /sbin/audisp-syslog
+path = /usr/bin/audisp-syslog
 type = always 
 args = LOG_INFO
 format = string
diff --git i/audisp/plugins/zos-remote/audispd-zos-remote.conf w/audisp/plugins/zos-remote/audispd-zos-remote.conf
index f1c0bbda..c53cd83d 100644
--- i/audisp/plugins/zos-remote/audispd-zos-remote.conf
+++ w/audisp/plugins/zos-remote/audispd-zos-remote.conf
@@ -8,7 +8,7 @@
 
 active = no
 direction = out
-path = /sbin/audispd-zos-remote
+path = /usr/bin/audispd-zos-remote
 type = always 
 args = /etc/audit/zos-remote.conf
 format = string