Solved

Ask windows file audit solutions

Posted on 2014-01-12
12
314 Views
Last Modified: 2014-03-28
Hi Experts,

We are using a file audit program to audit windows file server called File System Auditor 2 of ScriptLogic Corporation. Which caused some problems like makes CPU high on server in which audit database is located. And may causes one node of file Cluster to blue screen of death sometimes.

From Internet, someone suggests us disabling read audit which occupies much cpu, but we don't want to exclude read audit.

So do you have any other good file auditor solutions?  

Thanks in advance.

RSP_IT
0
Comment
Question by:rsp_it
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
  • 2
  • +1
12 Comments
 
LVL 55

Expert Comment

by:McKnife
ID: 39777670
Let's start with your requirements.
What of these goes beyond the capabilities of the built-in auditing?
0
 

Author Comment

by:rsp_it
ID: 39781092
The built-in auditing causes much log and not good to read. We hope to find if there has a third-party application to replace our current file auditor.
0
 
LVL 55

Expert Comment

by:McKnife
ID: 39781469
Ok, readability. So far I am not very experienced with 3rd-party solutions here.
We used snare, before server 2008 came out. 2008 introduced eventlog-forwarding, so our little requirements were met and we discontinued to use snare.

Have a look at it: http://www.intersectalliance.com/projects/SnareWindows/index.html#ScreenShots
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 4

Accepted Solution

by:
michaelalphi earned 500 total points
ID: 39781995
0
 

Author Comment

by:rsp_it
ID: 39784322
It looks interesting. I will look at this production and give your feedback later.
0
 

Author Comment

by:rsp_it
ID: 39784348
Thanks, michaelalphi.

This production looks the similar with my old software FSA, so I have to worry a bit about how the performance of this software supports 1600 users on one file server cluster. I will list it as one option of my solutions.

Is there other possible solutions?
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39784531
I have 1000-1100 users in our company’s FS cluster and it works fine. For your case, I would suggest you can talk their support team.
0
 

Author Comment

by:rsp_it
ID: 39787722
Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39787735
Yeah.
I hope, it should work fine in your FS cluster.
0
 
LVL 3

Expert Comment

by:Detlef001
ID: 39788419
Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.

Oh Yeah, Didnt went with michaelalphi coment. Its like few days back i have to do this and i tested auditing tool and todays its good to recommend some one as an answer.

Thanks.
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39802597
Hi RSP,
You can close this thread by accepting the answer.
0

Featured Post

Enroll in June's Course of the Month

June's Course of the Month is now available! Every 10 seconds, a consumer gets hit with ransomware. Refresh your knowledge of ransomware best practices by enrolling in this month's complimentary course for Premium Members, Team Accounts, and Qualified Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hallo! I guess almost every Windows Administrator must have got stumped with this question "Where does WINDOWS store a users cached credentials? Every user who had once logged onto a Server/Desktop while it was connected to the domain could sti…
My purpose is to describe the basic concepts of virtual memory as implemented in a modern Windows-based operating system. I will also describe the problems inherent in older systems and how virtual memory solves them. The dark ages - before virtu…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question