Chat now with support
Chat with Support

Change Auditor for Windows File Servers 7.2 - User Guide

Change Auditor for Windows File Servers Overview

•
Introduction
•
Deployment requirements
•
Client components/features

Introduction

Change Auditor for Windows File Server tracks, audits, and alerts on file and folder changes in real time, translating events into simple terms and eliminating the time and complexity required by system provided auditing. The auditing scope can be set on an individual file or folder or an entire file system recursive or non-recursive. You can include or exclude certain files or folders from the audit scope to ensure a faster and more efficient audit process.

In addition to File System auditing, you can protect and lock down critical file system paths from unauthorized or accidental modifications or deletions.

•
 

Deployment requirements

For a successful deployment, ensure that your environment meets the minimum system requirements. For information on system requirements, see the Change Auditor Release Notes. For details on installing Change Auditor, see the Change Auditor Installation Guide.

Client components/features

The following table lists the client components and features that require a valid Change Auditor for Windows File Servers license.

* 
NOTE: To hide unlicensed Change Auditor features from the Administration Tasks tab (including unavailable audit events throughout the client), select Action | Hide Unlicensed Components. Note this command is only available when the Administration Tasks tab is the active page.

 

 
Table 1. Change Auditor for Windows File Servers client components/features
Client Page
Feature

Administration Tasks Tab

Agent Configuration Page:

•
Event Logging - enable/disable File System event logging
•
Configuration Setup Dialog - File System Tab
•
Discard duplicates that occur within nn seconds
•
Audit all configured, including duplicates (Not Recommended)

Audit Task List:

•
File System
NOTE: See File System Auditing for information on enabling event logging, viewing/modifying the agent configuration settings and on creating templates to define File System auditing.

Protection Task List:

•
File System
NOTE: See File System Protection for information on creating File System protection templates.

Event Details Pane

What Details:

•
Path
•
Attribute
•
Process

Events

Facilities:

•
Custom File System Monitoring

Search Properties

What Tab:

•
Subsystem | File System
NOTE: See File System Searches/Reports for information on using the What tab to create custom File System search queries.

Searches Page

Built-in Reports:

•
Reports that include Custom File System Monitoring events.

Alert Body Configuration Dialog - Event Details Tab

Variables (email tags):

•
FS_ATTRIBUTENAME
•
FS_FILENAME
•
FS_FILESERVER
•
FS_FILESYSTEMTYPEID
•
FS_FOLDERPATH
•
FS_LOGONID
•
FS_PRIMARYSID
•
FS_PROCESSNAME
•
FS_SHARENAME
•
FS_TRANSCATIONID
•
FS_TRANSACATIONSTATUS
NOTE: See the Change Auditor User Guide for a description of these email tags and how to configure alert email notifications.
 

 

Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
RSS Feed
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating