• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 371
  • Last Modified:

Ask windows file audit solutions

Hi Experts,

We are using a file audit program to audit windows file server called File System Auditor 2 of ScriptLogic Corporation. Which caused some problems like makes CPU high on server in which audit database is located. And may causes one node of file Cluster to blue screen of death sometimes.

From Internet, someone suggests us disabling read audit which occupies much cpu, but we don't want to exclude read audit.

So do you have any other good file auditor solutions?  

Thanks in advance.

RSP_IT
0
rsp_it
Asked:
rsp_it
  • 4
  • 4
  • 2
  • +1
1 Solution
 
McKnifeCommented:
Let's start with your requirements.
What of these goes beyond the capabilities of the built-in auditing?
0
 
rsp_itAuthor Commented:
The built-in auditing causes much log and not good to read. We hope to find if there has a third-party application to replace our current file auditor.
0
 
McKnifeCommented:
Ok, readability. So far I am not very experienced with 3rd-party solutions here.
We used snare, before server 2008 came out. 2008 introduced eventlog-forwarding, so our little requirements were met and we discontinued to use snare.

Have a look at it: http://www.intersectalliance.com/projects/SnareWindows/index.html#ScreenShots
0
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

 
michaelalphiCommented:
0
 
rsp_itAuthor Commented:
It looks interesting. I will look at this production and give your feedback later.
0
 
rsp_itAuthor Commented:
Thanks, michaelalphi.

This production looks the similar with my old software FSA, so I have to worry a bit about how the performance of this software supports 1600 users on one file server cluster. I will list it as one option of my solutions.

Is there other possible solutions?
0
 
michaelalphiCommented:
I have 1000-1100 users in our company’s FS cluster and it works fine. For your case, I would suggest you can talk their support team.
0
 
rsp_itAuthor Commented:
Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.
0
 
michaelalphiCommented:
Yeah.
I hope, it should work fine in your FS cluster.
0
 
Detlef001Commented:
Thanks, michaelalphi. I will test this software.

Thanks, Detlef001. You mentioned the same software with michaelalphi.

Oh Yeah, Didnt went with michaelalphi coment. Its like few days back i have to do this and i tested auditing tool and todays its good to recommend some one as an answer.

Thanks.
0
 
michaelalphiCommented:
Hi RSP,
You can close this thread by accepting the answer.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 4
  • 4
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now