The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

audit status

Prev Next

This command displays whether the audit service in the Linux based Manager is running.

This command has no parameters.

Syntax:audit status

Sample Output:

IPSManager> audit status

Redirecting to /bin/systemctl status auditd.service

● auditd.service - Security Auditing Service

Loaded: loaded (/usr/lib/systemd/system/auditd.service; enabled; vendor preset: disabled)

Active: active (running) since Tue 2019-08-20 13:23:53 UTC; 3h 25min ago

Docs: man:auditd(8)

https://github.com/linux-audit/audit-documentation

Process: 1568 ExecStartPost=/sbin/augenrules --load (code=exited, status=0/SUCCESS)

Process: 1561 ExecStart=/sbin/auditd (code=exited, status=0/SUCCESS)

Main PID: 1562 (auditd)

CGroup: /system.slice/auditd.service

├─1562 /sbin/auditd

└─1564 /sbin/audispd