Hi Hugh,
Apologies for the delay in reply,
ADAudit Plus is dependent on native AD auditing and while setting up the needed policies will be configured with user consent.
The software is bundled with a PostgreSQL database that holds all audit data. ADAudit Plus also has an "Archive Events" feature that archives audit data periodically. Please follow the steps to configure the same,
1. Log on to ADAudit Plus
2. Click on the "Admin" tab
3. Click "Archive Events"
4. Fill in the necessary number of days, category-wise.
This will clear the processed audit data from database and archive[zip files] it. The archive location is also configurable.
We did not enable logging in our infrastructure because we did not want massive log files appearing
Windows Event Viewer has an "Overwrite events as needed"[which is the default setting] feature that helps in preventing large log files. Please verify this setting in the computers that you have configured in ADAudit Plus to prevent large file growth.
Please let us know for any further questions, I would be glad to assist.
Regards,
Bala