Basic Details of Notification Server Auditing

Rumor has it that there is an auditing feature built into Notification Server 6.x. How do I access, use and and manipulate Notification Server's internal auditing capabilities?

The Auditing capabilities are extremely lightweight and the procedures are simple. The details for them are:

1. The Notification Server stores changes (add, modify, delete events) to the Database using the NS Item Management's resource data class.
2. This data class uses the Evt_NS_Item_Management table to store the information. It stores the following:

   ItemGuid, ItemName, ItemAttributes, User, Action, ItemClassGuid, ResourceTypeGuid, Description

3. Auditing is activated automatically - No user intervention is required.
4. Auditing is NOT able to be turned off.
5. Purging is the only method to clean the data.
6. It is visible in the Notification Server, by highlighting an object, selecting Properties, and then choosing the Audit tab. This will display any data for the particular object you have selected.

For further information on some specifics of managing and using this data, see the Knowledge Base article at https://kb.altiris.com/article.asp?article=29316&p=1