Doc Bug: Is it one or both Audit settings needed?
For getting the System Console Usage, Top Console User, and UDA stuff to work, you need to enable some security event log audits.
This page says you need only 1 Audit setting:
These pages say you need both of the Audit settings:
Pinging this one again. Any luck?
Any luck figuring out if we only need "Audit logon events,” or both that and “Audit account logon events” are required?
I think there might have been a 3rd page, but I can't seem to find it now.