I was curious if there is a way to create a rule in my LEM to alert me if a file is created that is a certain size, for instance, 3 MB?
I go into the FIM connector for a node, but I do not see any other option besides just create a directory/file.
This is correct. SAM can tell you when a file of a certain size was created, but not who. So you could likely use the two tools in conjunction if you have them both and set it up to do so.
FIM does not track file size from anything that I've seen. Therefore you wouldn't be able to create a rule based on the data from FIM. The connector settings you're referencing are the types of actions you would like FIM to monitor, so you can either see a file created or not by selecting the appropriate setting.
It's possible that another tool you have, or Microsoft File Auditing would track this kind of information. If you can get an event with file size into the LEM it would be easy to create a rule from there.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.