This topic provides instructions on how to edit a global audit logging configuration.
You can edit a global audit logging configuration to change the destination of the global audit logs for your user audits by selecting a different Notification Server. You can also change the format and message fields of the global audit log entries by selecting a different Notification Template. You make changes to the Notification Server or Template on the Global Notifications panel. You can access the Global Notifications panel by clicking the view settings link on the Global Audit Logging Configurations panel.
You cannot change which Security Analytics user actions are logged and sent in the global audit logs.
Edit a Global Audit Logging Configuration
- In the Security Analytics menu, select Administration > System.
- In the options panel, select Global Auditing.
- In the Global Audit Logging Configurations panel, select a configuration to edit and click .
- In the Add New Configuration dialog, modify the global audit logging configuration as required. You can modify the Configuration Name and select a different NotificationServer or Template.
- Click Save.