Computer Properties: Auditing

Audit entries based on the following categories. Select this to enable audit logging of the audit categories that you choose from the list. Clear this to stop logging.

You can select any number of the categories to audit. Each category has a summary level; some categories also have a detailed level.

Table: Auditing Categories describes the categories that you can audit.
Advanced. Click this to control the number of simultaneous connections that Enterprise Vault auditing is allowed to make to the auditing database.

Each computer on which you enable auditing has a limited number of connections that it can make to the auditing database. These connections are reused as needed. Auditing uses a pool of connections to the auditing database. You can make Enterprise Vault log the level of usage of these connections and then, if necessary, you can modify the number of connections as required.

Table: Auditing Categories

Category	Records details of
View	Viewing archived items, either as HTML or in their original formats.
Delete	Archived items being deleted manually. There is no audit record of items that are deleted because of expiry.
Restore	Archived items being restored.
Archive	Items being archived, either manually or on a scheduled run.
PST Migration	Items being migrated from PST files.
NSF Migration	Items being migrated from NSF files.
AdminActivity	Configuration changes made in the Enterprise Vault Administration Console, such as adding a new service, creating archives, or enabling mailboxes.
Advanced Search	Searches performed using Outlook or the Web Access application, including the terms used and the number of items found.
GetOnlineXML	Document retrieval into SharePoint Portal Server.
Saveset Status	(For support use.) Rarely used. Records whether a saveset file is available.
User	Your own auditing entries, which you can add by calling a COM object that is served from the Admin Service. See the following examples: VBS example ASP example
View Attachments	Viewing of archived items from within SharePoint Portal Server.
FS Archive	File System Archiving activity.
Domino Archive	Any Domino archiving activity.
Domino Restore	Any Domino restore activity.
Exchange Synchronization	Records details of creation, modification, and deletion of Exchange managed content settings. Enterprise Vault records relevant details when it is configured to archive from Exchange managed folders and to synchronize with their managed content settings.
Archive Folder Updates	Archived items being moved to a different mailbox folder.
Retention Category Updates	Changes to the retention category of archived items.
Subtask Control	The creation and modification of subtasks, such as the subtasks that control Move Archive operations.
Move Archive	Details of individual Move Archive operations.

To turn connection information logging on or off

Click Advanced.
If you want to turn on logging, select Log database information. To turn off logging, clear Log database information.
Click OK.
Restart all the Enterprise Vault services on that computer.

Now, when an Enterprise Vault service that has auditing switched on shuts down, it logs an event that shows the number of connections it used and the maximum number of connections available to it. You can use this information to decide whether to change the connection pool sizes.

To change the connection pool sizes

Click Advanced.
Set the number of auditing connections for each Enterprise Vault service that is on the computer.
Click OK.
Restart all the Enterprise Vault services on that computer.