We have:
* out-of-the-box reports
* Audit Logs
* STS Logs
* IIS Logs
IIS logs are straight forward enough. Of course, the don't capture most useful
things. OWSSVR.DLL for loads of requests, etc.
Can anyone speak to where the data for Audit Logs, STS Logs, and Out-of-the-box
reports is coming from?
I am seeing great disparity between these 3 sources in multiple environments.
Which source is the most accurate? Would it be better to combine all 3 somehow?