Patent ID: 7779113

Claim:
A method for managing audit records, the method comprising: automatically receiving, at an audit management computer system, over a network, a plurality of audit records from two or more different applications of a plurality of different applications; wherein the plurality of audit records are automatically generated by the plurality of different applications on one or more computing devices in response to events that are designated to generate the plurality of audit records on the plurality of different applications; and performing, at the audit management computer system, operations on the plurality of audit records received, wherein the operations include: identifying in a first audit record that was generated by a first application of the two or more different applications a first user identification associated with a first user account, wherein the first audit record is in the plurality of audit records automatically received; identifying in a second audit record that was generated by a second application a second user identification associated with a second user account, wherein the second audit record is in the plurality of audit records automatically received; wherein the first user identification is different than the second user identification and wherein the first user identification and the second user identification are application specific; wherein the first user account is different than the second user account; determining that first user identification and the second user identification both map to a common user, wherein determining that the first user identification and the second user identification both map to a common user comprises comparing the first user identification and the second user identification to mapping information that identifies multiple user identifications for the common user in the network; wherein the first audit record describes an event that occurred while the common user was successfully logged in to the first application; wherein the second audit record describes an event that occurred while the common user was successfully logged in to the second application; recording the plurality of audit records in a repository; and associating the first audit record and the second audit record with the common user in the repository.