ausearch works differently in 1.0.12 (not sure when
the change was introduced), it searches msg='...'
fields to determine if operations are successful or
not, instead of only looking at the success=... field.
Try to replicate the ausearch behavior for the
-sv=yes no search. The preferred solution would be to
fix the audit record format, but that patch would be