Main Settings (Audit Manager)

To specify what events should be logged and how long to keep the logs:

1. Under Message Types, specify what types of events should be logged:

• Item Change creates an entry every time an object is edited.

• Item Deletion creates an entry every time an object is deleted.

• Locked Account creates an entry every time a user account is locked after a number of failed login attempts.

• Security Change creates an entry every time an object's security is edited.

• User Login creates an entry every time a user successfully logs in to the portal.

• Global System Change creates an entry every time an edit is made to the Global ACL Sync Map, the Global Property Map, the Global Content Type Map, the Global Object Property Map, or the User Information Property Map; every time job folders or Automation Services are registered; and every time global system settings are changed through the various portal utilities.

2. Under Archiving Agent, specify the settings for your auditing archive:

1. In the Network path of archive files box, type the path to the folder in which you want to store audit archive files.

2. In the Days to keep messages in database box, type the number corresponding to how many days worth of messages you want to store in the portal database. Only messages in the portal database are available for audit query. After the specified amount of time, messages are moved from the database into the archive files.

3. In the Days to keep messages in files box, type the number corresponding to the number of days you want to store the message files. After the specified period, messages are deleted from these files and no longer available.

3. Under Delete Messages, specify which messages you want to delete from the portal database (they are not moved into the audit archive) and which archives you want to delete from your file system:

1. In the Delete Messages and Archives prior to box, type the date for which you want to delete messages and archives. Any messages and archives with this date or an earlier date are deleted.

2. In the Message types to delete section, choose the types of messages (described earlier) that you want to delete from the database.

3. If you want to delete these messages and archives when you click Finish, select Yes next to Delete Messages and Archives when 'Finish' is clicked.

• To display the page associated with this help topic:

1. Click Administration.
2. In the Select Utility drop-down list, click Audit Manager.