The audit server database VMS$AUDIT_SERVER.DAT
contains information about events to be audited, the location of the
audit log file, and information used to monitor its consumption of
resources.
The audit log file resides in SYS$COMMON:[SYSMGR].
If you should decide to redirect the audit log off the system disk,
it is important to redirect it uniformly across all nodes on the cluster.
You use the command SET AUDIT/JOURNAL=SECURITY/DESTINATION=filename. Make sure that the file name you assign resolves
to the same file throughout the cluster, not a file unique to each
node. The HP OpenVMS Cluster Systems Manual describes
the procedure in detail.