Set the Match Order of Audit Store

When the audit and monitoring service is running on a system and it needs to connect to an audit store, you can use this policy to specify the search precedence.

If you set this policy to Enabled, then the agent looks for an audit store based on the Active Directory sites. If the search fails, then the agent looks for an audit store based on the subnet.

By default, this policy is not enabled, which means that audit stores are chosen first based on their subnet addresses and then based on the Active Directory sites.