Where is the actual resource in the OAM audit table?

Hello,

Using OAM 12.2.1.3. Looking in the oam_iau.iau_base table wher I see the audit events. I'm looking for the actual uri that the user accessed. I can see it in the flat file audit.log, but cannot find it in any column in this table. Any ideas?

Also, I'm seeing an audit_invalid.log next to my audit.log file on the OAM sever. Any ideas what this is? I can't find a reference in any document or in MOS.

Thanks!