To read audit entries from the current site collection you must start by creating an SPAuditQuery object and initializing it with an SPSite object.

在从当前网站集中读取审计信息前，我们首先要创建一个SPAuditQuery对象，并用一个SPSite对象初始化它。

youdao

For audit to understand how to print each object as a record to the audit log, it needs a corresponding entry in the /etc/security/events file.

为了让审计系统了解如何将每个对象作为一条记录输出到审计日志中，需要使用 /etc/security/events 文件中的相应条目。

youdao