Red Hat Enterprise Linux - The system shutdown abruptly with an Auditd service error

Environment

• Red Hat Enterprise Linux (All versions)

Issue

• The system is not booting. Shuts down automatically during boot sequence with error for Security Auditing Service:

 [ ***  ] A stop job is running for Security Auditing Service (1min / 1min 30s)

• The system stops abruptly with Security Auditing Service error

Root Cause

• admin_space_left defines min value (in megabytes) for free space below which the audit daemon performs the configured action.
• admin_space_left_action defines the action that the audit daemon performs. The possible values are ignore, syslog, rotate, email, exec, suspend, single, and halt.
• The halt option causes the audit daemon to shut down the system.

Resolution

• Check the audit settings in /etc/auditd/auditd.conf and check fields space_left_action, admin_space_left_action, disk_full_action, disk_error_action, and overflow_action
• If either of them has halt specified, check if the corresponding condition is met.
  If /var/log/audit is full and admin_space_left_action is set to halt, then the audit daemon shuts down the system citing low disk space.

https://access.redhat.com/solutions/6616171