Previous Topic: What CA ControlMinder Audits in Audit Only ModeNext Topic: Setting Audit Rules


How to Change What CA ControlMinder Writes to the Audit Log

You can change what CA ControlMinder writes to the audit log in two ways:

To reduce the number of audit records, you can also control consecutive audit events written to the log file. This customization is based on time interval between consecutive matching audit events (that is, an access to a resource with the same process ID, thread ID, rule ID, user ID, and access mask). The time interval, in seconds, can be set by setting the value of the AuditRefreshPeriod registry entry. By default, the AuditRefreshPeriod is set to zero (0), which means that all events are written to the log file.

More information:

Defining the Audit Events That CA ControlMinder Writes to the Audit Log