This configuration parameter specifies the target for audit trail information. Possible settings are:

  1. Audit information is not sent.
  2. Audit information is sent to DirectAudit. This capability is supported by DirectAudit version 3.2 and later.
  3. Audit information is sent to the local logging facility (syslog on UNIX systems, Windows event log on Windows systems).
  4. Audit information is sent to both DirectAudit and the local logging facility.

If DirectAudit 3.2 or later is installed, the default value is 3 (local logging facility and DirectAudit). Otherwise, the default value is 2 (local logging facility only). For example:

audittrail.targets: 3

In most cases, you set this configuration parameter using group policy.