34.2 Audit Policies

The Server decides whether to store an audit event, based on the policies defined by the User. These policies (or Filters or Storage Policies or Audit Policies) are rules which define certain conditions. The server records all audit events that match these conditions. Policies are configuration tools that the User has at his disposal to fine tune the detail of the events to be recorded.

When an event is recorded, the server checks with its policies to see if the event need be recorded.

Icon

So as to perform the actions specified in sections, Enabling Auditing and Disabling Auditing, a User needs adequate permissions. Please refer to the section 34.5 ACLS for Audit Management with regard to 'permissions'.