Hi Vivek,
the scenario you are describing should work. What kind of audit trail writer are you using (table, csv file, syslog) and how did you enable the audit trail (studio or via inifile change)? Maybe the XS engine entries are written to a different audit trail file or the auditing is not enabled for all services.
Best regards
Henning