Patent ID: 8904232

Claim:
A method implemented at least in part by a computer, the method comprising: attempting to copy a first audit record from a first buffer to a first audit target; detecting a failure to copy the first audit record from the first buffer to the first audit target; and in response to the failure to copy the audit record, performing additional actions, comprising: maintaining the audit record in the buffer, failing subsequent operations that would have triggered storing other audit records in the buffer, and performing another attempt to copy the first audit record from the first buffer to the first audit target and; receiving notification of an operation that is to be audited; generating a second audit record based on the operation; attempting to write the second audit record to a second audit target; detecting a failure to write the second audit record to the second audit target; evaluating a policy applicable to the failure to write the second audit record to the second audit target, the policy indicating to fail the operation if writing an audit record based on the operation to the second audit target fails; and in response to the evaluating the policy and the failure to write the second audit record to the second audit target, failing the operation.