|
|
To stop the auditing subsystem, use the
auditoff
command, as follows:
auditoff
Once auditing has been successfully stopped the following message is displayed:
Auditing disabledIf you invoke auditoff when auditing is already disabled, the following message is displayed:
Auditing already disabledThe auditing subsystem writes an audit record to the audit event log file for the invocation of the auditoff command and then disables auditing. Any processes that are being audited but have not completed will not generate audit records.