Patent ID: 8024296

Claim:
A method for processing data used to audit a server, comprising: coupling at least a portion of server audit information from a target server to an information server, wherein the target server comprises a database table, the server audit information comprises of a transaction log generated by the target server and a trace generated by the target server, the transaction log comprises information representing one or more operations to at least a portion of the database table, and the trace comprises information representing a login event related to the target server; processing the at least a portion of the server audit information at the information server to create audit data, wherein the processing the at least a portion of the server audit information comprises: using the transaction log and the at least a portion of the database table to generate at least one previous state of the at least a portion of the database table, and the audit data comprises: the at least one previous state of the at least a portion of the database table; and the login event; and storing the audit data in an audit data repository.