Where are Audit logs gets stored ?
Thank you for the post, to answer your query.The audit directory path in SecureSphere is configured by default under var/SecureSphere/audit. This path can be changed when wanting to store audit data in a different location than the default, including on an external volume.
Sharing the below link for more details on it,
So, they are not stored in Gateway?
The logs are stored in the gateway, the MX only retrieve the data from the gateway to visualize via GUI
Yes the logs are stored on the gateway, when you go to audit data and click on view audit, the logs are pulled from the gateway to the MX based on request.