To capture audit events generated by audit-enabled products, you must configure and start the The Audit Event Consolidator. Typically, you will run one consolidator process per machine. You can start the process from the command line or as a service (the installation process automatically configures a service).
The consolidator obtains its configuration information from a file specified with a command line option. See The Audit Consolidator Process Configuration File.
If you have configured the consolidator to use the AUDITFILE Emitter to log audit information, you will need to manage the files that it creates.
To create your own audit emitters to log information, see Audit Emitter Interface.