Implemented

SAM User Auditing

SAM recently added some basic user auditing events, but SAM needs more robust auditing of user initiated changes to the system, such as "who deleted my application template?", or " who assigned this application template to my server?" etc.

FormerIdeaCreator
Parents

  • I created a simple report in Orion Report Writer that is extremely useful for finding out who unmanaged nodes.

    Audit Event Log Template.

    I filtered results by "Action Type is equal to Node unmanaged" and "records time logged is greater than or equal to 11/11/2015"  <=This was just the date that we setup SAM.

    Time frame in my case is set to last 7 days for my weekly report.

    pastedImage_1.png

    pastedImage_2.png

    Not sure if this helps... Enjoy!

    Jason

Comment

  • I created a simple report in Orion Report Writer that is extremely useful for finding out who unmanaged nodes.

    Audit Event Log Template.

    I filtered results by "Action Type is equal to Node unmanaged" and "records time logged is greater than or equal to 11/11/2015"  <=This was just the date that we setup SAM.

    Time frame in my case is set to last 7 days for my weekly report.

    pastedImage_1.png

    pastedImage_2.png

    Not sure if this helps... Enjoy!

    Jason

Children
No Data

SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.

SolarWinds Customer Success Center Certification Media Vault Link Accounts
About THWACK Blogs For Government Edit Settings Free Tools & Trials
Legal Documents Terms of Use Privacy California Privacy Rights Security Information
©2024 SolarWinds Worldwide, LLC. All Rights Reserved.