This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to pull security event logs in CA database

Hi All,

how we can pull the windows security logs into Change Auditor database.

Thanks & Regards,

Prasad

Parents
  • I don't think CA does collect native Windows event log.
    Quest provides two products: CA and InTrust.
    1. CA generates own log for each platform or type (AD, Exchange, Windows OS, SQL, Logons)
    2. InTrust collects "untempered" native logs generated by the platform (Windows Event Log, etc.) and stores them in \\Repository in zipped encrypted format for long time (even if DC Security Log is 95% of junk events)
    CA and InTrust both complement each other.
    In general customer might start audit solution with CA as "quick win" and later explore the audit needs and discover that InTrust is needed.
Reply
  • I don't think CA does collect native Windows event log.
    Quest provides two products: CA and InTrust.
    1. CA generates own log for each platform or type (AD, Exchange, Windows OS, SQL, Logons)
    2. InTrust collects "untempered" native logs generated by the platform (Windows Event Log, etc.) and stores them in \\Repository in zipped encrypted format for long time (even if DC Security Log is 95% of junk events)
    CA and InTrust both complement each other.
    In general customer might start audit solution with CA as "quick win" and later explore the audit needs and discover that InTrust is needed.
Children
No Data