Where are SYS Audit Entries in Windows Event Log?

Question

I have audit_sys_operations set to true, audit_trail set to DB, have restarted the database since setting them, and have logged in as and performed actions as sysdba. However, I cannot find these entries in the Windows Event Log Viewer. From what I read, they should be under Windows Logs->Application. When looking there, I see nothing with an event id of 34 or a Source containing Oracle.

Am I missing something, or is something perhaps not configured properly?

Answer 1

Audit files get written into the folder audit_file_dest points to.

select value from v$parameter where name='audit_file_dest';