AUDITD
The audit daemon, auditd, operates as a server, monitoring /dev/audit for local audit data, monitoring a known port for data from remote cooperating audit daemons, and monitoring an AF_UNIX socket for input from the system administrator.
Available to all SRX running 12.3X48+
Available to all MX running 20.2R1+
Available to all vSRX running 20.3R1+