Constant CONTENT_QUEUE_CAPACITY 

pub const CONTENT_QUEUE_CAPACITY: usize = 8192;

Records waiting for the sink thread. A full queue drops new records (counted in av_content_records_dropped_total) instead of slowing the audit worker.