diff --git a/libraries/libapparmor/testsuite/test_multi/status-filesystem-enabled.err b/libraries/libapparmor/testsuite/test_multi/status-filesystem-enabled.err
new file mode 100644
index 000000000..e69de29bb
diff --git a/libraries/libapparmor/testsuite/test_multi/status-filesystem-enabled.in b/libraries/libapparmor/testsuite/test_multi/status-filesystem-enabled.in
new file mode 100644
index 000000000..6a5cbdd90
--- /dev/null
+++ b/libraries/libapparmor/testsuite/test_multi/status-filesystem-enabled.in
@@ -0,0 +1 @@
+audit.log:type=AVC msg=audit(1630913351.586:4): apparmor="STATUS" info="AppArmor Filesystem Enabled" pid=1 comm="swapper/0"
diff --git a/libraries/libapparmor/testsuite/test_multi/status-filesystem-enabled.out b/libraries/libapparmor/testsuite/test_multi/status-filesystem-enabled.out
new file mode 100644
index 000000000..7bce27747
--- /dev/null
+++ b/libraries/libapparmor/testsuite/test_multi/status-filesystem-enabled.out
@@ -0,0 +1,3 @@
+START
+File: status-filesystem-enabled.in
+Event type: AA_RECORD_INVALID
diff --git a/utils/aa-notify b/utils/aa-notify
index 7eb036887..91d0f3b9c 100755
--- a/utils/aa-notify
+++ b/utils/aa-notify
@@ -324,7 +324,7 @@ def parse_logdata(logsource):
             event = LibAppArmor.parse_record(entry)
             # Only show actual events of contained programs and ignore among
             # others AppArmor profile reloads
-            if event.operation[0:8] != 'profile_':
+            if event.operation and event.operation[0:8] != 'profile_':
                 yield event