Note:  Audit Manager is deprecated and provided for backward compatibility only. We recommend that you use syslog events instead.
               See 
               		Enterprise Server Auditing for more information. 
               	 
            
            	  
            	 
             
               	 
               
                   
                     		   
                     		   
                     		   
                     		   
                     		   
                     		  
                      
                        			 
                         
                           				
                           | Event Category
                              				
                            |  
                           				
                           Component Identifier
                              				
                            |  
                           				
                           Event Identifier
                              				
                            |  
                           				
                           Event Data
                              				
                            |  
                           				
                           Description
                              				
                            |  
                           			 
                        
 
                        		  
                      
                     		  
                      
                        			 
                         
                           				
                           | Audit Facility (1)
                              				
                            |  
                           				
                           MF.AUDITMGR
                              				
                            |  
                           				
                           0
                              				
                            |  
                           				
                            
                              				  
                               
                                 					 
                                 - mfauditmgr instance name (text)
                                    					 
                                 
  
                                 					 
                                 - mfauditmgr instance type (4-byte comp-5) 
                                    						
                                    
0 = command line
                                       						
                                     
                                    						
                                    1 = Windows service
                                       						
                                     
                                    					 
                                   
                                 				  
                                
                              				
                            |  
                           				
                           mfauditmgr starting
                              				
                            |  
                           			 
                        
 
                        			 
                         
                           				
                           | 1
                              				
                            |  
                           				
                            
                              				  
                               
                                 					 
                                 - mfauditmgr instance name (text)
                                    					 
                                 
  
                                 				  
                                
                              				
                            |  
                           				
                           mfauditmgr stopping
                              				
                            |  
                           			 
                        
 
                        			 
                         
                           				
                           | 2
                              				
                            |  
                           				
                            None
                              				
                            |  
                           				
                           Request received from mfauditadm -p to deactivate the active file
                              				
                            |