Monitor all actions of administrators

	Forums Register Login My Profile Inbox Address Book My Subscription My Forums Member List Search FAQ Ticket List Log Out

Monitor all actions of administrators

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Networking & Security] >> GFI EventsManager >> Monitor all actions of administrators

Page: [1]

Message

<< Older Topic Newer Topic >>

Monitor all actions of administrators - 19.May2008 7:34:51 AM

vasal

Posts: 3
Score: 0
Joined: 19.May2008
Status: offline

Hi.

Is there any way to monitor all actions per user, not per event? That is to monitor all actions an administrator performs on all servers/machines?

That is a requirement in our new security policy, and that is the reason we need a product like eventmanager!

thanx

< Message edited by vasal -- 19.May2008 7:45:15 AM >

Post #: 1

RE: Monitor all actions of administrators - 21.May2008 10:19:36 AM

LeoSanchez

Posts: 116
Score: 0
Joined: 28.Apr.2008
Status: offline

Hello vasal,

You can create a processing rule that will archive/alert on all events where the username field is 'Admistrator'. Simply use the processing rule wizard to create the rule. When you are in the conditions section fill in just the username field with 'Administrator' (no quotes). This way all events that have the word 'Administrator' in the username field of the event will be actioned on by this processing rule.

Please remember that GFI EventsManager uses priorities for these processing rule. Once a collected event matches a processing rule the processing of this event will stop.

_____________________________

Regards,

Leo - Technical Support
GFI Software - www.gfi.com

(in reply to vasal)

Post #: 2