Welcome to auditing
The auditing tool audits console user activity and stores the auditing information in the core database and optionally the Windows event log.
The auditing tool isn't enabled or visible by default. Before you can use auditing, you must give a user auditing configuration rights and then configure what activities you want audited.
If you haven't configured auditing, only auditing configuration changes are audited, such as giving or removing auditing rights.
For more information, see these additional topics: