SEPM11 audit logs

Hi,

 We are upgrading the SEPM11 version from SAV and i am new to the Endpoint protection.

 Could any one tell how to view audit logs in SEPM11 , For eg: I am moving system from one subgroup to another. how to view which user & when the system got moved in logs.

 Could any one share me the videos relate to SEPM11 configuration with AV,AS,PTP,NTP for Best practices.