Here, one or more audit applications are defined. See also the previous section for discussion on Path Mappings. Path Mappings are important to understanding how applications work. This audit application will record username for successful and failed logins.
<Application name="AuditExampleLogin1" key="auditexamplelogin1">
<AuditPath key="login">
<AuditPath key="no-error">
<RecordValue key="user" dataExtractor="simpleValue" dataSource="/auditexamplelogin1/login/args/userName"/>
</AuditPath>
<AuditPath key="error">
<RecordValue key="user" dataExtractor="simpleValue" dataSource="/auditexamplelogin1/login/args/userName"/>
</AuditPath>
</AuditPath>
</Application>