asked on

Ask windows file audit solutions

Hi Experts,

We are using a file audit program to audit windows file server called File System Auditor 2 of ScriptLogic Corporation. Which caused some problems like makes CPU high on server in which audit database is located. And may causes one node of file Cluster to blue screen of death sometimes.

From Internet, someone suggests us disabling read audit which occupies much cpu, but we don't want to exclude read audit.

So do you have any other good file auditor solutions?

Thanks in advance.

RSP_IT

McKnife

Let's start with your requirements.
What of these goes beyond the capabilities of the built-in auditing?

rsp_it

ASKER

The built-in auditing causes much log and not good to read. We hope to find if there has a third-party application to replace our current file auditor.

McKnife

Ok, readability. So far I am not very experienced with 3rd-party solutions here.
We used snare, before server 2008 came out. 2008 introduced eventlog-forwarding, so our little requirements were met and we discontinued to use snare.

Have a look at it: http://www.intersectalliance.com/projects/SnareWindows/index.html#ScreenShots

ASKER CERTIFIED SOLUTION

michaelalphi

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

rsp_it

ASKER

It looks interesting. I will look at this production and give your feedback later.

rsp_it

ASKER

Thanks, michaelalphi.

This production looks the similar with my old software FSA, so I have to worry a bit about how the performance of this software supports 1600 users on one file server cluster. I will list it as one option of my solutions.

Is there other possible solutions?

michaelalphi

I have 1000-1100 users in our company’s FS cluster and it works fine. For your case, I would suggest you can talk their support team.

rsp_it

ASKER

Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.

michaelalphi

Yeah.
I hope, it should work fine in your FS cluster.

Detlef001

Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.

Oh Yeah, Didnt went with michaelalphi coment. Its like few days back i have to do this and i tested auditing tool and todays its good to recommend some one as an answer.

Thanks.

michaelalphi

Hi RSP,
You can close this thread by accepting the answer.