Note:  Audit Manager is deprecated and provided for backward compatibility only. We recommend that you use syslog events instead.
               See 
               		Enterprise Server Auditing for more information. 
               	 
            
            	 
            Restriction:  This topic applies only when the Enterprise Server feature is enabled. 
               	 
            
 
            	 
             
               	 
               
                   
                     		   
                     		   
                     		   
                     		   
                     		   
                     		  
                      
                        			 
                         
                           				
                           | Event Category | Component Identifier | Event Identifier | Event Data | Description | 
 
                        		  
                      
                     		  
                      
                        			 
                         
                           				
                           | Audit Facility (1) | MF.AUDITMGR | 0 |  
                                 					 
                                 mfauditmgr instance name (text)
                                    					 
                                 mfauditmgr instance type (4-byte comp-5) 
                                    						
                                    0 = command line
                                       						
                                     1 = Windows service
                                       						
                                     | mfauditmgr starting | 
 
                        			 
                         
                           				
                           | 1 |  
                                 					 
                                 mfauditmgr instance name (text)
                                    					 
                                  | mfauditmgr stopping | 
 
                        			 
                         
                           				
                           | 2 | None | Request received from mfauditadm -p to deactivate the active file |