Multiple EKS audit logs files

Two log streams are created in parallel when you enabled Amazon EKS audit logs. They are named similar to: kube-apiserver-audit-<random-string>. There are two because Amazon EKS runs two API servers for each EKS cluster to maintain availability zone level redundancy.

"EKS runs a minimum of two API server nodes in distinct Availability Zones (AZs) within in AWS region." Source: https://aws.github.io/aws-eks-best-practices/reliability/docs/controlplane/