asked on

create a custom log to track deletes on windows server 2003

Hi all,

Is there a way to create a vbscript or something that I can run every half hour or so to track only specific events, create a log file and put it in a specified directory?

For example, I would like to generate a log file that tracks deletes of any folder in a specific directory and which user deleted it. The event viewer can be a bit kludgy to work with.

Henrik Johansson

If enabled object auditing, it will be collected in security eventlog.
As said, it can be a little bit hard to find stuff in event viewer...
Use a custom view with filter to only display interesting data or use command line tools like Log Parser or dumpel.exe to dump eventlogs or forward the logs through third party syslogagent to a syslog server for log monitoring.
With Log Parser, you can define a query with SQL/WQL-syntax to query for the interesting log records. It has a built-in template function making it possibly to create a HTML-file with the result for viewing.

http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en
http://www.microsoft.com/downloads/details.aspx?FamilyID=c9c31b3d-c3a9-4a73-86a3-630a3c475c1a&displaylang=en
http://syslogserver.com/syslogagent.html

ASKER CERTIFIED SOLUTION

bsharath

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

binovpd

ASKER

Sorry bfor the delay replying. this works well thank you.