The service command is the correct way to start and stop the audit daemon on RHEL 7. It has requirements that systemd commands cannot meet.

There is a big audit package rebase landing in 7.3. It would be best to wait until that lands to finish up the docs. It will be the 2.5.3 package if that is any help. It will have new configuration options and capabilities that need documenting.

(In reply to mertensb from comment #0)
> Document URL: 
> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/
> html/Security_Guide/chap-system_auditing.html
> 
> Section Number and Name: 
> Chapter 5. System Auditing and underlying sections
> like 5.2. Installing the audit Packages
> 
> Describe the issue: 
> This chapter has not been updated for RHEL7.
> examples:
> section 5.2 says "The audit packages (audit and audit-libs) are installed by
> default on Red Hat Enterprise Linux 6."
> and section 5.4. Starting the audit Service refers to the commands service
> and chkconfig instead of systemctl.
> 
> Suggestions for improvement: 
> Update the section for RHEL7, remove references to RHEL6 and update the
> commands and possibly other items to reflect the status of RHEL7.
> 
> Additional information:

Hello,

I have updated the section and removed the mentioned obvious relics. We will make a bigger and complete update of the audit chapter as soon as the big package rebase of audit will be available in RHEL (7.3).

Thank you for your report.

The fix was published on the Customer Portal:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/chap-system_auditing.html