When collecting from event logs, to find that the total data stored in the event log for a given time period is very different than the repository, which is also different than the database, e.g a day is 100 MB, the repository is only 5 MB and the audit database is 300 - 500 MB.