AFAMKIC, the fact that the OS file got some messages written, it
shows that auditing is active. If you set AUDIT_TRAIL=OS you will
see a lot more messages depending on what objects you have audited.