Audit trails - What should be included in an audit trail?

An audit trail must encompass all necessary data to determine the sequence of events and their initiators. Typically, the record of an event should indicate the time of occurrence, the user ID linked to the event, the program or command that triggered the event, and the outcome.