View previous topic :: View next topic |
Author |
Message |
Yeprem Just Arrived
Joined: 19 Nov 2004 Posts: 0 Location: Montreal, Canada
|
Posted: Thu Dec 13, 2007 2:16 am Post subject: Fileserver monitoring or loging software. |
|
|
Hi everybody,
Can anyone suggest a server software that can keep a log of all activity on a Windows fileserver? Basically I need to audit file moves, deletions, copies, etc.. and the user who performed the action.
Thanks,
Yeprem
|
|
Back to top |
|
|
dveuve Just Arrived
Joined: 28 Dec 2006 Posts: 0
|
Posted: Thu Dec 13, 2007 5:19 am Post subject: |
|
|
I've used System Change Log with success. It's cheap, and may not scale well in larger enterprises, but it does server as an effective Windows logging tool, that converts the somewhat inscrutable windows audit log messages into something that actually makes sense. As I look at it now, it hasn't been updated in something like two years, so if you're looking to deploy something on a large scale, or to support Server 2008, you'd probably want to look elsewhere, but if you're trying to monitor one server 2003 system, it's cheap, easy to setup, and effective. http://www.greyware.com/software/systemchangelog/
|
|
Back to top |
|
|
Yeprem Just Arrived
Joined: 19 Nov 2004 Posts: 0 Location: Montreal, Canada
|
Posted: Thu Dec 13, 2007 6:23 am Post subject: |
|
|
Thanks dveuve for the link. Actually, for now I do only need it for one server running Windows 2003, but I would like something that saves the information to a database.
I could import the logs to a SQL db, but if something is out there that saves straight to the db, great.
|
|
Back to top |
|
|
dveuve Just Arrived
Joined: 28 Dec 2006 Posts: 0
|
Posted: Thu Dec 13, 2007 10:05 am Post subject: |
|
|
One possibility would be to use something like Lasso to connect to a linux syslog-ng server, but that would probably introduce huge amounts of unnecessary complexity. Windows file monitoring, in general, happens through the event viewer, which is notoriously difficult to manage without a reasonably expensive product. Microsoft System Center Operations Manager (the new version of Microsoft Operations Manager) could probably do that, and it would also do a lot more, but it's definitely a more significant investment. There is probably something else out there that is more targeted to what you need, though.
|
|
Back to top |
|
|
Yeprem Just Arrived
Joined: 19 Nov 2004 Posts: 0 Location: Montreal, Canada
|
|
Back to top |
|
|
|