wesleyw

All of the above if windows event logs can do it, also service restarts when failing etc.. Full Auditing really and all of this via GPO settings if possible. We use AD Audit Plus for reporting on the Events, however, WMI settings on the servers need to be changed to really get the best out of the system. We are also looking into a SIEM as well to allow us a central logging system for all devices windows/unix/switches/routers. However to give the best information I need to know how to configure the windows servers and clients to capture all of the events that may be needed. In the end I suppose it's trying to separate what's important on/to every individual server for us to report on. So to cut a long story short I suppose I'd like to know what would be considered extremely important to monitor on: DCs, SQL Servers Exchange Servers Windows 7 & 8 clients Then work out the log file storage requirements of each event log on each server? After that I would also look to get a system to archive these off after a set amount of time. Wes

Hi Guys, I've been looking round trying to find a few guides to Best Practice in capturing event logs in Windows (Servers and Clients) I've found a little but I was hoping one of you could point me in the right direction. I'm looking for info on what I should be logging in general and specifically security wise. How big the log files generally need to be (I know, I know how long is a piece of string etc... ) I would need to log events from Windows 7 and 8. Windows Servers DC, DNS, DHCP, Active Directory, MS SQL, Oracle SQL, MySQL, SharePoint, Exchange, Print Servers, File Replication Services, File Servers in general, Application servers, IIS and Citrix XenMobile and Xen App? Thoughts ideas and reference points greatly appreciated. Wes

If i knew them beforehand it would be easy just =countif(column range,"cat") would be the way to go

Sorry. I suppose an example would be column A1 to 10 has values: A1 cat A2 dog A3 gerbil A4 hamster A5 gerbil A6 goldfish A7 dog A8 dog A9 cat A10 goldfish Without knowing any of these before hand i would like something to count up the most popular pets?

Hi guys, without knowing what string based values maybe present in a column on sheet1 how could I count up the top 5 strings in a column and display them on sheet2? Thanks Wes

I don't suppose you would have something that would copy a row to another sheet if say column B had a certain fill colour would you? Wes

Works exactly the way I need thanks!

Okay I have an excel document with about 7000 rows. Column A, Column B and Column C In the A column it denotes a computer name in the B column it denotes a user who has access and Column C denotes the amount of users that have access. However only on the first line for that computer in Column A is a value and I want to propagate the correct name to every row in Column A. E.g. [table=width: 500] [tr] [td]PC1[/td] [td]User1[/td] [td]3[/td] [/tr] [tr] [td][/td] [td]User2[/td] [td][/td] [/tr] [tr] [td][/td] [td]User3[/td] [td][/td] [/tr] [tr] [td]PC2[/td] [td]User1[/td] [td]3[/td] [/tr] [tr] [td][/td] [td]User6[/td] [td][/td] [/tr] [tr] [td][/td] [td]User9[/td] [td][/td] [/tr] [/table] Etc.. any ideas how I could code this?

Is there a way of Blocking or Allowing based on browser and/or OS type using WebSense at all? Thanks, Wes

The creation and deletion of User Accounts within a predefined time range? I.e I would like to know if someone creates a user account at say 10:00am but within 10 minutes deletes the account again. So if a user account is created and deleted within 10 minutes I want a report of who created it. I can then match this to incident calls we have to see why it was created. Thanks, Wes

What do you use? Wes

Could anyone tell me if SCOM or ADAudit could track the creation of accounts and their subsequent deletion usually within a few minutes of each other but it could be longer. We are just trying to pin down when these temporary accounts are made and by whom? If neither of these packages can do this could you volunteer a package that can? Thanks, Wes

Does anyone know how I would create a report to show bad username logon attempts at all? Wes

Novell filr and google drive as well

All of the new versions of these programs save files that windows/*nix interpret as folders anyone got a solution to this issue? Can I add these file types to windows server for instance and windows 7/8 to force them to see it as something else or am I in fact stuck? Wes

Cutepdf might but i dont think it will unlock those restricted pdfs not sure why but i never had any success with it.

You can use linux and ghostscript that will just create another doc with no restrictions

Most of the run will be in conduit but the end is the big worry

I have some external door readers that need an RJ45 patch lead to up-link has anyone good tips on making these waterproof/weatherproof? Wes

I have four CM2 climate monitoring units I'd like to configure for use with Cacti I download a WxGoose set of templates and scripts (same manufacturer different MIB though). I've modified it so it should be okay however I get the following: + Running data query [13]. + Found type = '3' [sNMP Query]. + Found data query XML file at '/var/www/html/resource/snmp_queries/WxGoose-internal.xml' + Error parsing XML file into an array. + Found data query XML file at '/var/www/html/resource/snmp_queries/WxGoose-internal.xml' + Found data query XML file at '/var/www/html/resource/snmp_queries/WxGoose-internal.xml' + Found data query XML file at '/var/www/html/resource/snmp_queries/WxGoose-internal.xml' See the attached files for the modifications, any ideas what I'm doing wrong? swift_mibv3.mib.txt cacti_data_query_wxgoose_-_internal_multi-sensor_climate.xml.txt MyModifiedScript.xml.txt WxGoose-internal.xml.txt Thanks, Wes

Is there a way of checking what apps have been cached on a mac caching server? Wes

Jim Beam do a Cherry and a Honey flavour too, both are very good. Wes

How would I go about using your system via an ADOM? I'm still interested to see if I can connect to it myself and setup a web server to report on it if you can help? Wes

I would like to query the box to get hourly, daily, weekly, monthly, termly and yearly usage reports however there isn;'t much info in the basic documentation there may be more in-depth info hidden away but I haven't been able to find it as yet (probably typing in the wrong search parameters). Really all I need to know is how do I connect to fortinet's sql db and which tables/records i should look at? Thanks, Wes

Has anyone used the SQLite logging tables within Fortinet to create some dynamic web pages with traffic info? Wes