Jeremiah Beckett
Guest
|
Posted:
Thu Jan 20, 2005 4:37 am Post subject:
RE: MOM - Security Event Logs |
|
|
MOM can do it.
You can used the canned MOM/OperationalAnalysis/event report and reference
individual events (ie 529, 535) or create your own report. You might need to
add some event rules for collection depending on what you already have
loaded.
I'm assuming this is in relation to SOX so I would recommend creating a new
MP to support this auditing requirement and future needs. You can develop
some very comprehensive reports and MP features just for SOX if you spend a
little time. We did one recently to capture all privlaged account logon
afterhours and other manual SOX auditing.
FYI, Manakoa at www.manakoa.com is working on some MPs specifically to
address SOX, HIPPA and other federal regulatory IT compliancy auditing. They
should be released later this year.
Good luck.
"iamchris" wrote:
| Quote: | I am being audited for failed logon attempts. I need to print a report
of all failed domain logon attempts for a certain date range. Will MOM
give me this information or do I need to purchase a product that
strictly deals with event log monitoring? If MOM will do it, how do I
set this up? Thanks in advance!
|
|
|