Ensure auditd service is enabled

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


Turn on the auditd daemon to record system events.


The capturing of system events provides system administrators with information to allow them to determine if unauthorized access to their system is occurring.


Run the following command to enable auditd:

# systemctl --now enable auditd

Additional Information:

Additional methods of enabling a service exist. Consult your distribution documentation for appropriate methods.

See Also