DX Unified Infrastructure Management

  • 1.  Security level Monitoring -UIM

    Posted Dec 20, 2016 10:12 AM

    Hi All,

     

     Is there any probe to monitor the changes happening in OS level configuration files by users (must provide audit tracking)in UIM.

     

    Regards



  • 2.  Re: Security level Monitoring -UIM

    Broadcom Employee
    Posted Dec 20, 2016 10:17 AM

    are you talking about changes to the OS itself or to configuration files for UIM?

    if the later you can look at the audit probe.


    if you are talking about the OS itself you will have to check what auditing the OS provide and then use something like logmon

    or ntevl to check the logs for audit events. This second option will only alert not track changes and store in the UIM database for reporting.



  • 3.  Re: Security level Monitoring -UIM

    Posted Dec 20, 2016 10:23 AM

    Or look at the dirscan probe - there's age criteria in there for files - you'd have to know what you were looking for ahead of time (or look for everything except what you know will change) 

     

    -Garin



  • 4.  Re: Security level Monitoring -UIM

    Posted Dec 20, 2016 11:05 AM

    i:e I need to track the group policy ,registry changes in windows servers. ,



  • 5.  Re: Security level Monitoring -UIM

    Broadcom Employee
    Posted Dec 20, 2016 11:12 AM

    there is nothing OOTB that will do this.

    You will need to check with MS if they track this any where.

    Then look to see what might be able to monitor that location.