Audit Trail cleaner automation task Using BigFix for DSA environment

What do you see in the logs? Is it failing at stopping the root server? does the BESAdmin command pop up any messages when you run it stand alone?

At 13:37:46 -0500 - actionsite (http://XYZ:52311/cgi-bin/bfgather.exe/actionsite)
Command started - wait sc stop BESRootServer (action:16365)
At 13:37:46 -0500 -
Encryption: optional encryption with no certificate; reports in cleartext
At 13:37:48 -0500 -
Error posting report to: ā€˜http://XYZ:52311/cgi-bin/bfenterprise/PostResults.exe’ (General transport failure.
SOCKET CONNECT (winsock error 4294967288)
At 13:37:48 -0500 - actionsite (http://XYZ:52311/cgi-bin/bfgather.exe/actionsite)
Command succeeded (Exit Code=0) wait sc stop BESRootServer (action:16365)

I think they mean the BESRelay.log (the server log) when the commands are issued

Relay log
image

Server Audit log

Client log

Ok this seems to be working fine.
As @dmccalla pointed out, your command may have some messages popping up. Does the below command work silently for you?
BESAdmin.exe /audittrailcleaner /run /oldcontent /oldactions /oldrelaydatfile /deletedcontent /deletedactions /orphanedsubactions /hiddenactions=15 /deletedmailbox /syncconsoles /olderthan=15 /batchsize=100000

It asks me for my site pvk location, so my guess is you have to provide that in the command.