Enterprise Vault™ Auditing
- About this guide
- Introducing Enterprise Vault auditing
- Setting up auditing
- Viewing the audit database entries
- Viewing the audit database entries using Audit Viewer
- Viewing the audit database entries using SQL queries
- Auditing for data protection compliance
- Appendix A. Format of audit database entries
Setting up auditing
Table: Steps to set up auditing summarizes the tasks that are required to set up auditing, and provides links to the sections where you can find more information.
Table: Steps to set up auditing
Create the audit database.
One audit database is created for all of the Enterprise Vault servers in the site.
Select the categories to audit.
You configure audit categories on each Enterprise Vault server in the site.
Start or stop auditing.
You need to start or stop auditing on each Enterprise Vault server in the site.
If necessary, tune auditing.
You can tune auditing by changing the number of connections that Enterprise Vault services can make to the audit database.
There are registry settings associated with the configuration of Enterprise Vault auditing. If you change these registry settings directly using Regedit, instead of using the Enterprise Vault Administration Console, Enterprise Vault auditing cannot capture information about the user who makes the changes. If you want to record this information, configure Windows Registry Auditing for the settings under
Always configure Enterprise Vault auditing using the Enterprise Vault Administration Console. Do not change the associated registry values directly.