Solved

Ask windows file audit solutions

Posted on 2014-01-12
12
301 Views
Last Modified: 2014-03-28
Hi Experts,

We are using a file audit program to audit windows file server called File System Auditor 2 of ScriptLogic Corporation. Which caused some problems like makes CPU high on server in which audit database is located. And may causes one node of file Cluster to blue screen of death sometimes.

From Internet, someone suggests us disabling read audit which occupies much cpu, but we don't want to exclude read audit.

So do you have any other good file auditor solutions?  

Thanks in advance.

RSP_IT
0
Comment
Question by:rsp_it
  • 4
  • 4
  • 2
  • +1
12 Comments
 
LVL 53

Expert Comment

by:McKnife
ID: 39777670
Let's start with your requirements.
What of these goes beyond the capabilities of the built-in auditing?
0
 

Author Comment

by:rsp_it
ID: 39781092
The built-in auditing causes much log and not good to read. We hope to find if there has a third-party application to replace our current file auditor.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 39781469
Ok, readability. So far I am not very experienced with 3rd-party solutions here.
We used snare, before server 2008 came out. 2008 introduced eventlog-forwarding, so our little requirements were met and we discontinued to use snare.

Have a look at it: http://www.intersectalliance.com/projects/SnareWindows/index.html#ScreenShots
0
 
LVL 4

Accepted Solution

by:
michaelalphi earned 500 total points
ID: 39781995
0
 

Author Comment

by:rsp_it
ID: 39784322
It looks interesting. I will look at this production and give your feedback later.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:rsp_it
ID: 39784348
Thanks, michaelalphi.

This production looks the similar with my old software FSA, so I have to worry a bit about how the performance of this software supports 1600 users on one file server cluster. I will list it as one option of my solutions.

Is there other possible solutions?
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39784531
I have 1000-1100 users in our company’s FS cluster and it works fine. For your case, I would suggest you can talk their support team.
0
 

Author Comment

by:rsp_it
ID: 39787722
Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39787735
Yeah.
I hope, it should work fine in your FS cluster.
0
 
LVL 3

Expert Comment

by:Detlef001
ID: 39788419
Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.

Oh Yeah, Didnt went with michaelalphi coment. Its like few days back i have to do this and i tested auditing tool and todays its good to recommend some one as an answer.

Thanks.
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39802597
Hi RSP,
You can close this thread by accepting the answer.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Suggested Solutions

This article covers how to install the Microsoft Windows Operating System (OS). What is covered in this article:  > Different Versions and Editions of the Windows OS  > Upgrading versus Fresh Installation of the OS           - Steps to take pr…
INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now