AUDIT Logging & PROTOCOL APP

Hi Guys,

I have few questions about PROTOCOL App, and audit logging.

1- We have configured OFS.SOURCE of Type Session for Browser and enabled logging and defined a directory name, however, I can't find any folder with this name in my server to search for the events.

2- How to export PROTOCOL records / events to SIEM.

3- How Will Records in EB.PROTOCOL.PARAM affect PROTOCOL application and how to link them! currently we do not have EB.PROTOCOL.PARAM records but PROTOCOL APP is generating logs.

4- What is the role of PROTOCOL.DETAILS and is the events in PROTOCOL their details incase of Function "Insert" been invoked will be recorded in PROTOCOL.DETAILS or is it just for COB ?, coz if someone executed Insert function on a record there will be no details in the event of what have been modified.

Hi
how exactly OFS.SOURCE is set up?

What is SIEM ?