In APM 10.8 SP1 uses Logback library for logging including the Audit log but it is not enabled by default.
APM 10.8
Please add the following to the logback-em.xml after the <logger name="AUDIT_LOGGER" section
<root level="INFO">
<appender-ref ref="CONSOLE"/>
<appender-ref ref="AUDIT_FILE"/>
</root>
Example:
<logger name="AUDIT_LOGGER" level="INFO" additivity="false">
<appender-ref ref="CONSOLE"/>
<appender-ref ref="AUDIT_FILE"/>
</logger>
<root level="INFO">
<appender-ref ref="CONSOLE"/>
<appender-ref ref="AUDIT_FILE"/>
</root>
You will need to restart the service.