Introduction to the Databases used for Auditing
Server Suite provides an auditing infrastructure that enables your organization to capture and store session activity on audited computers. The auditing infrastructure also enables auditors to query and report on specific events, view all or selected session activity, change the status of reviewed sessions, and delete sessions that are no longer needed. The auditing infrastructure relies on two types of databases to store information: the management database and the audit store database.
If you are not familiar with the components and architecture of the auditing infrastructure, see the Auditing Administrator’s Guide. That guide provides detailed information about how the components in the auditing infrastructure communicate with each other and how to configure and manage an audit installation.