Preprocessors designed to reduce the volume of audit records to facilitate manual review. Before a security review, these tools can remove many audit records known to have little security significance. These tools generally remove records generated by specified classes of events, such as records generated by nightly backups.
Source(s):
NIST SP 800-53 Rev. 4
under Audit Reduction Tools
from
CNSSI 4009
Preprocessors designed to reduce the volume of audit records to facilitate manual review. Before a security review, these tools can remove many audit records known to have little security significance.
Source(s):
CNSSI 4009-2015
from
NIST SP 800-12