Enterprise Vault™ Auditing
- About this guide
- Introducing Enterprise Vault auditing
- Setting up auditing
- Viewing the audit database entries
- Viewing the audit database entries using Audit Viewer
- Viewing the audit database entries using SQL queries
- Auditing for data protection compliance
- Appendix A. Format of audit database entries
Creating the audit database
It is important to apply appropriate security to the audit database. You should consider limiting the access to the database for very privileged users, such as the Vault Service account. For example, you may want to prevent the Vault Service account from removing or modifying Archive Permissions records in the audit database.
The Enterprise Vault databases contain roles that you can use to increase the database security in your environment. For information on how to use database roles to improve security on the audit database, see Using sing SQL Database Roles in Enterprise Vault, Compliance Accelerator, and Discovery Accelerator.
The audit database can grow to a large size, and it may sometimes be necessary to perform a rollover to a new database or remove entries from the database to reclaim some disk space. For more information, see the Enterprise Vault SQL Best Practices guide.
To create the audit database
- In the left pane of the Administration Console, right-click the Enterprise Vault Directory and then, on the context menu, click Enable Auditing.
- Under Audit Database location, click Browse to display the available locations for the audit database.
- If you want to create a new folder for the audit database, click New Folder.
- Click the location to use for the audit database, and then click OK.
- Under Transaction log location, click Browse to display the available locations for the audit database transaction log.
- If you want to create a new folder for the transaction log, click New Folder.
- Click the location to use for the log, and then click OK.
- Click OK to close the Configure Auditing dialog box.
- Wait a few moments for Enterprise Vault to create the database.
- When Enterprise Vault displays a message confirming that it has created the audit database, click OK to dismiss the message.
The audit database is created on the same SQL Server as the Enterprise Vault Directory database. However, you can move the audit database to another server, if required.