Hi,
is this still actual?

Try as zimbra user:
Code:
cp /opt/zimbra/conf/auditswatchrc /opt/zimbra/conf/auditswatchrc.in
zmauditswatchctl start
In my case I get no errors, but zmauditswatchctl status shows "not running". No idea why.