Enable Auditing for the Secure Store Service

Solution: Use the Set-SPSecureStoreServiceApplication cmdlet with the audit parameters.

Two audit parameters can be used with the Set-SPSecureStoreServiceApplication cmdlet. The first parameter, AuditingEnabled, is a switch parameter that determines whether auditing is enabled. The second parameter, AuditlogMaxSize, determines how many days to retain the logs. Listing 16.3 shows example command lines.

Listing 16.3. Configuring the Secure Store Service Auditing

$sss = Get-SPServiceApplication -Identity bc4399ed-a2e0-4397-bf07-
cd3d207e630e
Set-SPSecureStoreServiceApplication -Identity $sss -AuditingEnabled
-AuditlogMaxSize 15

Auditing is disabled by default; the initial retention value is 30 days.