space_left = 75
#space_left_action = SYSLOG
space_left_action = email
action_mail_acct = XXXXXXXXXX
This is where you are getting the DNS issues running from a child.
But auditd should write to syslog why it was exiting. My guess is disk
Thank you for the quick response. Audit is now starting. I changed
space_left_action = SYSLOG and audit started working. Space was not an
issue; 60 GB still available. Can I know why email option is not
Thank you all for helping me to resolve the issue.
Cheers to SELinux!!!!!