settings for event

A configuration parameter set — part of an audit policy — that specifies which categories or subcategories of system and security activity a platform will record in its logs, along with whether successes, failures, or both trigger a log entry. It is distinguished from the log itself or the review of logs: it is the upstream, declarative control that gates what evidence gets generated in the first place. Standards bodies and platform vendors treat it as the mechanism by which organizations "track precisely defined activities," selecting "only the behaviors that you want to monitor" — making it a foundational element of audit-and-accountability control families such as NIST 800-53 AU-2 (Audit Events) and CIS guidance to "configure detailed audit logging" including event source, date, username, timestamp, and addresses that would support forensic investigation.