The following is a list of issues known to exist with Agent-side Audit Log Backup at the time of Quest release:InTrust 9.5.
The option to resolve IP addresses at gathering IIS logs does not work with the 'Create agent-side audit log backup' option enabled.
When you process a non-Windows audit trail, avoid gathering the same event data to the same Audit database with and then without the 'Agent-side audit log backup' option enabled on the agents, since this may result in duplicate event records in the Audit database. For event data collect from Windows event logs, duplicate records never appear in an Audit Database.
Events collected from IIS Server log with the 'Agent-side audit log backup' option enabled are stored with empty site description fields.