Update sql-database-audit-log-format.md

Author: DavidTrigano

articles/sql-database/sql-database-audit-log-format.md

@@ -26,6 +26,8 @@ For example, for database `Database1` on `Server1` the following is a possible v
 
     Server1/Database1/SqlDbAuditing_ServerAudit_NoRetention/2019-02-03/12_23_30_794_0.xel
 
+Read-only Replica Audit logs are stored in the same container. The directory hierarchy within the container is of the form `<ServerName>/<DatabaseName>/<AuditName>/<Date>/RO/`. The Blob filename shares the same format.
+
 ### Event Hub
 
 Audit events are written to the namespace and event hub that was defined during auditing configuration, and are captured in the body of [Apache Avro](https://avro.apache.org/) events and stored using JSON formatting with UTF-8 encoding. To read the audit logs, you can use [Avro Tools](https://docs.microsoft.com/azure/event-hubs/event-hubs-capture-overview#use-avro-tools) or similar tools that process this format.
@@ -84,4 +86,4 @@ Audit events are written to Log Analytics workspace defined during auditing conf
 
 ## Next Steps
 
-Learn more about [Azure SQL Database auditing](sql-database-auditing.md).
+Learn more about [Azure SQL Database auditing](sql-database-auditing.md).