I am running RHEL 7 Server so that I can also run Red Hat Satellite.

I seem to be having resource contention problems and auditd is a part of the problem consuming up to 22.0% according to results of the top command.

I have:
  1. executed a systemctl disable auditd; systemctl stop auditd  (with an error about dependencies)
  2. executed a service auditd stop (and the service stops but doesn't not remain stopped).
  3. Rebooting the machine after the systemctl disable auditd also didn't have any effect.


I did set -e 1 in the audit.rules file so that I could stop the auditd on my demand, but the service restarts anyway.


Thanks for your help in advance.

--------------------------
Warron French