The Management Pack monitors events from Windows Management Information (WMI) of any computer that is running a properly installed and registered instance of the Change Auditor coordinator. The Change Auditor components are set up so that the management pack rules automatically deploy to any computer that is running a properly installed and registered instance of the Change Auditor coordinator.
The following SCOM type is supported with the Change Auditor Management Pack:
- Quest Change Auditor Installation
This SCOM type identifies which agents are intended to run the Change Auditor rules, To view a list of all the Change Auditor rules associated with this SCOM type, open the Rules folder of the Authoring pane in the SCOM Operations Console.
The following Alert View is supported with the Change Auditor Management Pack:
- Quest Change Auditor
This view presents the list of Change Auditor alerts associated with the members of the Quest Change Auditor Installation type.
Name: Change Auditor Alerts
Description: All Change Auditor alerts
To display the Change Auditor Alert view, open the Change Auditor folder in the Monitoring pane of the SCOM Operations Console.
The following SCOM Object Discovery is supported with the Change Auditor Management Pack:
- Quest Change Auditor
This attribute locates the servers that are running Change Auditor coordinators. The attribute reflects the existence of the following Registry Key, whose presence indicates a properly installed and registered instance of the Change Auditor coordinator: SOFTWARE\Quest\ChangeAuditor\Coordinator\Path
The ChangeAuditor.xml file found under <ChangeAuditor_install_files>\Integration\SCOM2007\, includes all of the Audit events that are sent to SCOM.