Trusted Solaris Audit Administration

To Stop the Audit Daemon

Only one audit daemon may run at a time. An attempt to start a second one will result in an error message, and the new one will exit. If there is a problem with the audit daemon, terminate the audit daemon gracefully, then restart it manually.

    To stop the audit daemon in event of trouble, as role secadmin, at label admin_high:


    $ audit -t
    

    This is not recommended. Audit records may be lost.