Hi,
I am trying to recommend which auditing events and event details to choose for a client of mine. In general, I would say the more things you audit, the more work the auditing process will be doing and the more resources you will tie up. So, you should only keep what you need. The default is a good place to start. However, I was wondering if any of you have a good tip about an auditing event that you find especially useful to keep that does not come with the default, and you have seen it been used more than other events. Also, if event details at the query level are maintained have you seen anyone been especially happy with their system after having set that on? I usually recommend rights details at user group and rights only. Thanks in advance!