File audit

duckp
duckp used Ask the Experts™
on
I have been tasked at work to reduce the number of files that are used by the organisation, there are 40000+ files and I want to be able to log which ones are being used so that I can archive ones that are not used.
Is there any way of achieving this without using the built in auditing as I don't find this very usefull.
Ideally I want to be able to get the info into a database so that I can extract the info I need.

Any ideas how I could achieve this ??

many thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
jkr
Top Expert 2012

Commented:
Use the Auditing mechanism of NT (you can enable that in the user manager) - so the OS itself will automatically create an event log file for you.

Author

Commented:
The NT auditing only seems to allow viewing using the event viewer, this is not very practical when tracking 40000+ files, I need to be able to get the results into a database so that I can analyse and extract the info that I need.
Commented:
Using the NT Auditing mechanism is definitely the way to go.  The trick is just getting at the information.

While it is possible to access the EventLog programmatically and get the information you need, I would take advantage of the "Export" feature of the EventLog viewer.

1) Open the Computer Management console.
2) Right-click on the "Security" section under "Event Viewer".
3) Select "Export List"
4) Then clear the log.

Then import that list into a database, and analyze the data anyway that you need.

Enjoy.
Dex*
Rowby Goren Makes an Impact on Screen and Online

Learn about longtime user Rowby Goren and his great contributions to the site. We explore his method for posing questions that are likely to yield a solution, and take a look at how his career transformed from a Hollywood writer to a website entrepreneur.

jkr
Top Expert 2012

Commented:
>>The NT auditing only seems to allow viewing using the event viewer

Yes, but what is problem with dumping an event log to a file? :o)

http://www.sysinternals.com/ntw2k/freeware/psloglist.shtml

Author

Commented:
Thanks Dexstar.....I must be half asleep as I have used the export in the past....I think my brain is fried :-)

Thanks again
jkr
Top Expert 2012

Commented:
Um, didn't I point aut the auditing mechanism or was this a Q about how to export an event log?

Author

Commented:
jkr as mentioned in my original question I already knew about the built in auditing and mentioned wanting to be able to use a database to extract the info I required, Dexstar reminded me about the export facility and the fact I would be able to import that output into a database.

Thanks for your input to the question but I felt Dexstar had a better idea what I was trying to achieve and gave the best answer to help me achieve my goal.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial