Auditing data and IFI

Starting, stopping, or modifying trace through IFI might cause changes to the events being traced for audit.

Each time these trace commands are processed a record is sent to the destination processing the trace type. In the case of audit, the audit destination receives a record indicating a trace status has been changed. IFCIDs 4 and 5 contain these records.