Why there are formal steps for upgrading an audit installation

In most organizations that deploy auditing, the auditing infrastructure—the installation—consists of components on multiple computers that must be able to communicate with each other to collect, transfer, and store information about user and computer activity. This multi-tiered architecture might be widely distributed and might include hundreds or thousands of computers that must be monitored. Upgrading all of those computers without interrupting ongoing auditing service requires a formal upgrade process that allows computers from different versions to continue communicating for a period of time.