The operating system buffers the audit trail data while it is written before writing it to disk. For this reason, the growth of the audit trail file will not become apparent until the data is flushed to disk.