event sourcing vs change data capture cdc for auditing

hey everyone, i've been thinking a lot about how to keep a good audit trail for our systems. two patterns that pop up are Event Sourcing and Change Data Capture, or CDC. Event Sourcing seems pretty powerful for rebuilding state from a bunch of events, but honestly, it can be a bit tricky to get going and query on the fly. CDC, though, captures row-level changes from databases, and that feels more direct for checking historical data. what are your thoughts, have you used these before? when did Event Sourcing seem like the better way to go, and when is CDC good enough, or maybe even better, for auditing