Re: Logging

From: Chris (kierownikx_at_yahoo.com)
Date: 08/04/05


Date: Thu, 4 Aug 2005 10:30:14 -0500

Thanks for your reply, can you recommend professional loggin tool?

"Jorge_de_Almeida_Pinto" <UseLinkToEmail@WindowsForumz.com> wrote in message
news:3_1319689_e191aab77a077f03f7f789682d9ff658@windowsforumz.com...
> "" wrote:
> > Hi,
> >
> >
> >
> > How can I retrieve and print security logs, so that
> > management can see who
> > has accessed folders/files and when? There must be a better
> > way then
> > scrolling thru Event Viewer and filter only file access
> > related events.
> >
> >
> >
> > Advice please!
> >
> >
> >
> > Chris
>
> you need to configure auditing for the server and after that you need
> to configure what files/folders are audited and who is audited. All is
> logged into the security event log. Do some tests to see which event
> IDs are generated and then use eventcomb to get all IDs from the
> server.
> Be aware that is you audit when each user accesses a file/folder you
> logs can become huge and if that goes fast newer events will overwrite
> (depending how you configure logging) older events. For this you may
> need a professional auditing tool that retrieves the logs from time to
> time
>
> --
> Posted using the http://www.windowsforumz.com interface, at author's
> request
> Articles individually checked for conformance to usenet standards
> Topic URL:
> http://www.windowsforumz.com/Security-Logging-ftopict399380.html
> Visit Topic URL to contact author (reg. req'd). Report abuse:
> http://www.windowsforumz.com/eform.php?p=1319689



Relevant Pages

  • Re: retrieving information up the stack
    ... object and retrieve an instance variable via a getter. ... StackTraceElement but don't know how I can retrieve the object to ... are running in all types of unrelated contexts. ... retrieve my logs only in the context of the "dailybulletinprocess". ...
    (comp.lang.java.programmer)
  • Re: Logging
    ... > How can I retrieve and print security logs, ... logs can become huge and if that goes fast newer events will overwrite ... Visit Topic URL to contact author (reg. ...
    (microsoft.public.win2000.security)
  • Re: Retrieve Domain Name
    ... user name logs in. ... if I acccess in a computer with the domain ... I can't retrieve the domain name (example: ... Prev by Date: ...
    (microsoft.public.dotnet.languages.vb)
  • Logon Auditing
    ... perl script I have written. ... It works quite well and I can retrieve ... is that every time I connect to a remote server to retrieve logs ...
    (microsoft.public.win2000.security)