Wildcard auditing in v5.0

[yubiuser]

Sorry for the delay. I've never used auditing but reading your posts carefully again I see what the problem is:
Since v5.0 the auditlog.list doesn't exist anymore. As (almost) all other lists, this has been incorporated into the gravity database (gravity.db). Specifically into the table domain_audit.

https://docs.pi-hole.net/database/gravity/#audit-table-domain_audit

If you want to add domains manually you have to perform this via sql.

sudo service pihole-FTL stop

sudo sqlite3 /etc/pihole/gravity.db "insert into domain_audit(id, domain, date_added) values (1, '*.twitter.com', strftime('%s', 'now'));"

sudo service pihole-FTL start

To view the the domains on the auditlog

sqlite3 /etc/pihole/gravity.db "select * from domain_audit"

For how to remove entries, see here

How to clear the audit log?

Yes, so audit log is stored in the database /etc/pihole/gravity.db, see, e.g., sqlite3 /etc/pihole/gravity.db "SELECT * FROM domain_audit;" You can remove single domains (example: google.de) using sudo sqlite3 /etc/pihole/gravity.db "DELETE FROM domain_audit WHERE domain = 'google.de';" or purge the entire list without specifying a specific domain: sudo sqlite3 /etc/pihole/gravity.db "DELETE FROM domain_audit;"

Also using the GUI button will result in adding entries into this table instead of the old auditlog.list