Re: Track user behaviour through event log

From: Elliot Gingold (elliotg@unimelb.edu.au)
Date: 06/13/02 

From: "Elliot Gingold" <elliotg@unimelb.edu.au>
Date: Thu, 13 Jun 2002 10:34:46 +1000

The problem of course is that the information required will be on logs on a
number of different machines. I use a log consolidator type program for
this - ELM Log Manager. I can search the database for all mentions of the
user. However, appropriate auditing must be turned on and you can't audit
everything!

Elliot

"Søren Maigaard" <spam@maigaard.com> wrote in message
news:#f25zvJCCHA.1576@tkmsftngp04...
> Is there a program that can track user behaviour through the event log?
> That is, see which files she opens, when and how many, how many times she
> tries to log on and at what hours - and then create a profile for that
user
> over time. If she then does something outside of this profile (for
instance
> tries to access different files than she usually does and at 3 o'lock at
> night) it would alert the administrator. Is that possible?
>
> TIA,
>
> - Søren
>
>