All sites should have the following books or information available when setting up auditing:
Trusted Solaris 7 Release Notes
Describes any late-breaking news about auditing, including known problems.
Trusted Solaris Administrator's Procedures
Describes administration tasks, such as assuming a role, in detail.
Your site security policy
Describes the security policy and security procedures at your site.
Other books on auditing that might be of interest include:
A Guide to Understanding Audit in Trusted Systems
Auditing in a UNIX System
DoD Trusted Computer System Evaluation Criteria (the Orange Book)
Compartmented Mode Workstation Evaluation Criteria
Guideline for Trusted Facility Management and Audit, Virgil D. Gligor, 1985