You control auditing by starting or stopping the Audit Manager.
To capture audit events generated by audit-enabled products, you must configure and start the Audit Manager. You can start the process from the command line.
The Audit Manager consolidator obtains its configuration information from a file specified with a command line option.