Information
The Security Audit Provider category must be enabled for production environments. The Security Audit Appender and the Security Audit Provider category together set up the audit infrastructure that allows deployed applications to easily audit authentication and authorization events.
Solution
Ensure the Security Audit Provider category is defined within JBOSS_HOME/server/@PROFILE@/conf/jboss-log4j.xml. By default, the Security Audit Provider category exists and just needs to be uncommented.