Does AMP generate audit failure logs?

[CatBlanket]

I am very new to this Cisco product, and am currently going through some vendor security questions, and one of the questions is if our end user security will generate a log in the case of a failure to write a separate log. This might be a very simple question, but I haven't had a chance to dig in too deep quite yet, thanks!

[JennieZhang]

Hello @CatBlanket 

thanks for posting questions here.

I searched in knowledge database hoping to find out some relative information but seems there is no existing report/contact from clients saying that AMP failed to write a separate audit log.

If you observed anything that seems indicating audit log failure, please kindly contact our TAC team. they will be more than happy to help.

thanks and have a good day!