Solved

Ask windows file audit solutions

Posted on 2014-01-12
12
304 Views
Last Modified: 2014-03-28
Hi Experts,

We are using a file audit program to audit windows file server called File System Auditor 2 of ScriptLogic Corporation. Which caused some problems like makes CPU high on server in which audit database is located. And may causes one node of file Cluster to blue screen of death sometimes.

From Internet, someone suggests us disabling read audit which occupies much cpu, but we don't want to exclude read audit.

So do you have any other good file auditor solutions?  

Thanks in advance.

RSP_IT
0
Comment
Question by:rsp_it
  • 4
  • 4
  • 2
  • +1
12 Comments
 
LVL 54

Expert Comment

by:McKnife
ID: 39777670
Let's start with your requirements.
What of these goes beyond the capabilities of the built-in auditing?
0
 

Author Comment

by:rsp_it
ID: 39781092
The built-in auditing causes much log and not good to read. We hope to find if there has a third-party application to replace our current file auditor.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39781469
Ok, readability. So far I am not very experienced with 3rd-party solutions here.
We used snare, before server 2008 came out. 2008 introduced eventlog-forwarding, so our little requirements were met and we discontinued to use snare.

Have a look at it: http://www.intersectalliance.com/projects/SnareWindows/index.html#ScreenShots
0
Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

 
LVL 4

Accepted Solution

by:
michaelalphi earned 500 total points
ID: 39781995
0
 

Author Comment

by:rsp_it
ID: 39784322
It looks interesting. I will look at this production and give your feedback later.
0
 

Author Comment

by:rsp_it
ID: 39784348
Thanks, michaelalphi.

This production looks the similar with my old software FSA, so I have to worry a bit about how the performance of this software supports 1600 users on one file server cluster. I will list it as one option of my solutions.

Is there other possible solutions?
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39784531
I have 1000-1100 users in our company’s FS cluster and it works fine. For your case, I would suggest you can talk their support team.
0
 

Author Comment

by:rsp_it
ID: 39787722
Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39787735
Yeah.
I hope, it should work fine in your FS cluster.
0
 
LVL 3

Expert Comment

by:Detlef001
ID: 39788419
Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.

Oh Yeah, Didnt went with michaelalphi coment. Its like few days back i have to do this and i tested auditing tool and todays its good to recommend some one as an answer.

Thanks.
0
 
LVL 4

Expert Comment

by:michaelalphi
ID: 39802597
Hi RSP,
You can close this thread by accepting the answer.
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
sbs 2011 6 21
Boot Disk drive letter change 15 87
sql query 3 44
Windows Server 2012 Data Center Edition 11 106
This article describes how to set permissions to allow a limited-permissions user to start and stop a particular System Service.   It is always best to give users only the permissions that they need to perform their job, so tweaking particular permi…
Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now