question about auditing

[chris]

I want to configure auditing for object access on certain folders on the
File Server.

Can I configure it such that the security audit log will be saved
automatically before it starts to overwrite itself, or perhaps save
themselves to a different computer other than the File Server event log ?


If not, are there any third party solutions that could do this.

thanks in advance for any assistance.

 

[Joe Richards [MVP]]

Can I configure it such that the security audit log will be saved

automatically before it starts to overwrite itself
No

perhaps save
themselves to a different computer other than the File Server event log ?

No

If not, are there any third party solutions that could do this.

Yes, you want to look at the monitoring products that do event log scraping. They have an agent that sits on the machine
and reads the event logs and sends them back to the monitoring server. Look at MOM or ManageX or OpenView, etc.