Where is the offline spool for Direct Audit located by default?
Offline spool Location for *NIX machines
Offline spool Location for Windows Machine using the Windows Agent
Offline spool Location for Windows Machine using the Connector (Enabled Direct Audit in CPS)
Note: The offline spool size when using the Connector cannot be limited to a certain size. It will continue to spool until it is re-connected to a collector or it runs out of space on the server.