Cost of Analysis

The cost of analysis is roughly proportional to the amount of audit data that is collected. The cost of analysis includes the time it takes to merge and review audit records, and the time it takes to archive them and keep them in a safe place.

The fewer records that you generate, the less time it takes to analyze them. Upcoming sections, Cost of Storage and Auditing Efficiently, describe how you can reduce the amount of data that you collect, while still providing enough coverage to achieve your site's security goals.