SCOM 07- Audit Collector

Woohoo! Systems Center Operations Manager 2007 comes with a new 'toy'... Audit Collector. *FINALLY* it'll be easy to pull all security event logs from domain controllers and servers. It's built pretty smooth and with security in mind. It keeps the security logs in a separate database, sends over an encrypted channel and does it in real-time in case there's a bad admin who's trying to delete security logs. I'm excited to get this loaded up because right now I only am able to retain about a day on each domain controller due to space. So now I just have to come up with SQL space so I can send ALL security logs! The reporting built into it will make it all worth it... :)

No comments: