audit

Our current enterprise solution is a ASP.NET MVC application driven by the Entity Framework. There are a couple links on how to hook into the change events for auditing. I'm not really interested in this. I'm interested in enterprise level auditing architecture. Those of you with the enterprise level battle wounds, what has been your auditing solutions? Do you serialize objects in databases in a framework. Are you setting up database triggers to audit tables? Do you use a separate database all together so your audit growth doesn't affect your app database? I'm interested in the tried and true

I'm using Spring Data 1.5 and Auditing. Part of the AuditingEntityListener has a setAuditingHandler method. How can I customize the AuditingHandler and instruct Spring-Data to inject my custom handler instead of the default org.springframework.data.auditing.AuditingHandler ? I've tried instantiating my own AuditingEntityListener in which I inject my own Handler, but that is not doing the job. The default handler is still being injected. I've tried both via XML configuration and JavaConfig to see if one worked better than the other, but neither way works. JavaConfig: @Configuration

Pretty general question regarding triggers in SQL server 2005. In what situations are table triggers fired and what situations aren't they? Any code examples to demonstrate would be great. I'm writing a audit based databases and just want to be aware of any situations that might not fire off the triggers that I have set up for update, delete and insert on my tables. A example of what I mean, UPDATE MyTable SET name = 'test rows' WHERE id in (1, 2, 3); The following statement only fires the update trigger once. Eric When do you want them to fire? CREATE TRIGGER AFTER ACTION That runs after the

do you know any good Java library for audit logging? Or at least good book/article to help choose good approach to build audit log for an application? Library requirements: - define common audit metadata (userId, time, IP, ...) - define audit message types (transaction sent, message received, ...) - lock/sign individual audit messages (for non-repudiation) - search audit log based on metadata - etc. Edit: I'm not looking for automated solution, I'm perfectly happy with calling something like: AuditEvent event = new TransactionSentEvent(userId, account, amount, ...) AuditLog.audit(auditEvent);