For writing To write Sphereshield auditing events into windows the Windows event log (Event Viewer) , you need to verify the “EventLogAppender” log level is set to WARN. If you do not wish to write the events into the windows Windows event logs - you can either change it change the log level to ERROR or completely remove the <appender-ref.=”EventLogAppender”>
...
The files are located in the adapter root folder
...
.
Verify the appender is referneced referenced as below
...
When an audit occurs, In in the event viewer under “Windows Logs - Application” the Warn Warning should appear like as below: