Audit problem : A system call received a parameter that is not valid.

UNIX AIX
1

while i try to start the audit i have the below error message .

audit>audit start
** auditing enabled already
A system call received a parameter that is not valid.

please advice

2

I suppose start is a parameter that is not valid if it is already started?

3

no my frind i type audit shutdown and after the i type audit start and the message appear agine .

4

Both lines? Maybe the shutdown is not honored?

5

do you mean to kill the audit process and stop the arcsight maybe the solution

6

Something out that direction. stop before start.

7

you mean to stop the audit and start it agine after maybe it works

i try this but the error still happend

---------- Post updated at 09:13 PM ---------- Previous update was at 09:06 PM ----------

thanks man i try it agine and its work now

after i kill every thing and restart them its work hep hep hurray