Solved

File audit

Posted on 2003-10-22
7
240 Views
Last Modified: 2013-12-28
I have been tasked at work to reduce the number of files that are used by the organisation, there are 40000+ files and I want to be able to log which ones are being used so that I can archive ones that are not used.
Is there any way of achieving this without using the built in auditing as I don't find this very usefull.
Ideally I want to be able to get the info into a database so that I can extract the info I need.

Any ideas how I could achieve this ??

many thanks
0
Comment
Question by:duckp
  • 3
  • 3
7 Comments
 
LVL 86

Expert Comment

by:jkr
ID: 9602134
Use the Auditing mechanism of NT (you can enable that in the user manager) - so the OS itself will automatically create an event log file for you.
0
 

Author Comment

by:duckp
ID: 9602335
The NT auditing only seems to allow viewing using the event viewer, this is not very practical when tracking 40000+ files, I need to be able to get the results into a database so that I can analyse and extract the info that I need.
0
 
LVL 19

Accepted Solution

by:
Dexstar earned 125 total points
ID: 9602897
Using the NT Auditing mechanism is definitely the way to go.  The trick is just getting at the information.

While it is possible to access the EventLog programmatically and get the information you need, I would take advantage of the "Export" feature of the EventLog viewer.

1) Open the Computer Management console.
2) Right-click on the "Security" section under "Event Viewer".
3) Select "Export List"
4) Then clear the log.

Then import that list into a database, and analyze the data anyway that you need.

Enjoy.
Dex*
0
Want to promote your upcoming event?

Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

 
LVL 86

Expert Comment

by:jkr
ID: 9603671
>>The NT auditing only seems to allow viewing using the event viewer

Yes, but what is problem with dumping an event log to a file? :o)

http://www.sysinternals.com/ntw2k/freeware/psloglist.shtml
0
 

Author Comment

by:duckp
ID: 9608104
Thanks Dexstar.....I must be half asleep as I have used the export in the past....I think my brain is fried :-)

Thanks again
0
 
LVL 86

Expert Comment

by:jkr
ID: 9608125
Um, didn't I point aut the auditing mechanism or was this a Q about how to export an event log?
0
 

Author Comment

by:duckp
ID: 9608191
jkr as mentioned in my original question I already knew about the built in auditing and mentioned wanting to be able to use a database to extract the info I required, Dexstar reminded me about the export facility and the fact I would be able to import that output into a database.

Thanks for your input to the question but I felt Dexstar had a better idea what I was trying to achieve and gave the best answer to help me achieve my goal.
0

Featured Post

The curse of the end user strikes again      

You’ve updated all your end user’s email signatures. Hooray! But guess what? They’re playing around with the HTML, adding stupid taglines and ruining the imagery. Find out how you can save your signatures from end users today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now