By the time we find an issue, a lot of time there is nothing left in the audit log. No trainable data, just an error that cannot be diagnosed. Seems ridiculous if we expect our clients to take this seriously as a business OS. It needs better record keeping. We have other systems that literally still have 25 years of data in them. Not sure we need it that long, but 12 months should be a minimum. Since we have to keep IRS records for 7, that seems more reasonable.