The audit database is too large and most space allocated is determined to be used by some specific data (eventID, datasource,etc). It is not possible to purge only the desired event range, datasource,etc.
Currently the audit database clean-up job functions only by time.
The database must be purged and the data re-imported with more specific filter criteria.
Enhancement request TFS123935 has been submitted to Devlopement for consideration in a future release of InTrust.