Auditing

The audit trail includes a number of events that are grouped into audit categories. Specific audit requirements can vary, and it is often necessary to balance auditing and system performance. For these reasons, you can configure your own auditing requirements using Audit Policy.

An auditing event is a record of a user action. For example, you may configure the audit policy to record each time a group is deleted, or each time Security Console data is exported. The audit trail records the user who committed the event, whether the event was a success or a failure, and the event time and date.

You can view an audit trail by extracting audit data. The report extract can be run from Security Console, or from SunSystems using Security Audit (SEA).

An audit can generate a lot of data. If you do not archive your audit data, it may affect system performance. Use Archive to archive historical audit data.