After the installation of ACS, the ACS forwarders send all events to the ACS collector. The ACS collector processes the data and sends the data to the ACS database.
We have to filter to ensure only specified events are stored in the database. These events are of Event IDs 4663
and 4656
.
In this recipe, we will configure the Microsoft System Center 2012 Operations Manager Audit Collection Services to log the events we planned in the Planning a compliance program for Microsoft System Center 2012 Operations Manager recipe.
Configuring the Microsoft System Center 2012 Operations Manager Audit Collection Services Collector
Configuring the Microsoft System Center 2012 Operations Manager Audit Collection Services Forwarder