Windows file auditing

Posted on 2006-04-04
Last Modified: 2008-02-01

I have Windows auditing turned on (both success and failure) for object access.  Unfortunatley because Success auditing is enabled my event viewer can hold no more than a couple of hours worth of history before being overwritten.  I would like to get an app that automatically exports the event viewer logs to a SQL db and maybe translate or filter the logs to help us capture just the important info (who accessed what file when, and what they did to it).  Does anyone have any recommendations?

Question by:IOIT
    1 Comment
    LVL 4

    Accepted Solution

    Here are a couple of soultions to take a look at, see what works for you.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    I annotated my article on ransomware somewhat extensively, but I keep adding new references and wanted to put a link to the reference library.  Despite all the reference tools I have on hand, it was not easy to find a way to do this easily. I finall…
    A list of useful business intelligence software.
    This video will demonstrate how to find the puppet warp tool from the edit menu and where to put the points to edit.
    The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now