Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
How to restrict excessive events from being auditing on specific agents.
Description
When using for example, the Logon Activity User module to capture domain user logons from all workstations, and the Event Class "User performed a successful network logon from a remote computer" is enabled, which is generating hundreds of thousands events on a daily basis. Even the same exact event is being generated multiple times when a user logs into the domain...same time, origin, user, etc. These events are causing the SQL DB to grow at an enormous rate . How can this traffic be reduced while still capturing the pertinent information.
Sign In Required
You need to be signed in and under a current maintenance contract to view premium knowledge articles.
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to Quest Support
You can find online support help for Quest *product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
The Quest Software Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.