15.4 Auditing Not Working

Issue: The events are not generated even though all the configuration settings are successful.

Workaround: Verify if the spool file entry is frequently updated when events are not generated even though all the configuration settings are successful in the following directory:

/usr/netiq/vsau/local/spool/LinuxAuditObject__singleton/*.udetect_events