Searching for an audit event

Hello,

I am looking for an audit event for service disable and enable. In
particular interested in an audit event related to BSM audit daemon
disable or BSM audit daemon process kill/termination. I am wondering
if any of the AUE_AUDITON_* audit events will do the job. I have also
tried AUE_EXIT or an AUE_EXECVE to see if anything meaningful will be
audited for a process kill and no luck there.

Thanks in advance,
Adelena

.