Windows File Server integration with Splunk

[Kaand]

Hello,

What is the best third party app to monitor Windows File Server event logs such as (file read, file creation, permission modification etc.)?

I want my file server logs to be simplified and organized.  

[gcusello · Accepted solution]

Hi @Kaand,

using Splunk you can monitor all the activities on your file server, but you have to know that's much expensive in terms of File Server Resources (you have to enable an heavy monitoring) and Splunk License (File Server is much verbose).

If instead your need isn't to monitor File Server Activity but having a Users and shared resources map. you can find many tools on Internet, also Windows 2016 has a tool to map network drives.

Ciao.

Giuseppe

[gcusello]

Hi @Kaand,

good for you.

Ciao and happy splunking.

Giuseppe

P.S.: Karma Points are appreciated 😉