The following audit log files are available:
/var/opt/novell/log/ncpserv.audit.log
/var/opt/novell/log/ncp2nss.audit.log
/usr/novell/sys/._NETWARE/SYS.audit.log
/var/log/audit
By default, the NSS Auditing Client Logger (vlog) utility sends its output to stdout in an XML record format. The default log file location is /var/log/audit. You can use VLOG options to modify the output location and logging behavior. For information, see vlog(8) in the OES 2018 SP2: NSS Auditing Client Logger (VLOG) Utility Reference.