Altiris Audit Change
Created: 14 Feb 2013 | 3 comments
I have a Altiris (NS 7.1) system with roles/permissions assigned to multiple users. I would like to track and be notified when any of these users make any changes to the Altiris system. Any best practices for auditing an Altiris system?
I know that all Altiris objects have an audit tab on their properties. Does anyone know what CMDB table houses the audit tab information? I could then query that table. Thanks for your input.
Comments 3 Comments • Jump to latest comment
hi,
check this artical
http://www.symantec.com/connect/articles/altiris-monitor-solution-monitoring-and-auditing-systems-part-1
http://www.symantec.com/connect/articles/altiris-monitor-solution-monitoring-and-auditing-systems-part-2
http://www.symantec.com/connect/articles/readyaltiris-monitor-solution-monitoring-and-auditing-systems-part-3
http://www.symantec.com/connect/articles/readyaltiris-monitor-solution-monitoring-and-auditing-systems-part-4
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
I may have expressed myself wrong, what I need is that changes in the equipment appear CMDB Audit tab in the properties and showing who changed equipment, eg user X changed the status of the equipment to "In Stock", user Y changed location information from this same machine and so to all other fields CMDB.
Looks like you've found the data. Write a query against these data classes to meet your requirements. Set up an automation policy so that it runs each morning at a set time (e.g. 1:00 a.m.) for the previous 24 hours' change (based on the Event Time column). You will need to do this for each data class whose status history interests you.
This will not tell you what data changed -- only that someone changed the data. Only some data classes keep a detailed history (I think that's a Status tab).
Mike Clemson, Senior Systems Engineer, ASC
Intuitive Technology Group -- Symantec Platinum Partner
intuitivetech.com
Would you like to reply?
Login or Register to post your comment.