If you start auditing without using a configuration file, the following defaults are used:
- Shared memory is used as the IPC mechanism.
- The Secure file emitter only is enabled, with the following characteristics:
- Audit file collection size of 5.
- Maximum size of each audit file in the collection is 20MB.
- The timeout period for sending events is set to zero; that is, no timeout period is in effect.
- The location in which the audit files are created is set by the environment variable
MFAUDIT_LOGS.
