Windows file auditing
Posted on 2006-04-04
I have Windows auditing turned on (both success and failure) for object access. Unfortunatley because Success auditing is enabled my event viewer can hold no more than a couple of hours worth of history before being overwritten. I would like to get an app that automatically exports the event viewer logs to a SQL db and maybe translate or filter the logs to help us capture just the important info (who accessed what file when, and what they did to it). Does anyone have any recommendations?