systemctl stop auditd

systemctl stop auditd
Failed to stop auditd.service: Operation refused, unit auditd.service may be requested by dependency only (it is configured to refuse manual start/stop).
See system logs and 'systemctl status auditd.service' for details.

See also

• Auditd, auditctl, /var/log/audit/audit.log