There is a feature called Event Logging in the Change Auditor Agent configuration, which will allow Change Auditor events to be locally written in the Windows event log, depending on different modules. These event logs can then be collected using InTrust to satisfy long-term storage requirements. For more information, please refer to the Change Auditor User Guide under the "Agent Configurations" > "Enable Event Logging" topic:
https://support.quest.com/technical-documents/change-auditor/user-guide
