I have some news rules in SCOM 2012 and I would like to know who create that, I wnat to identify what admin created this.
Thank you,
Technology Tips and News
I have some news rules in SCOM 2012 and I would like to know who create that, I wnat to identify what admin created this.
Thank you,
Take a look at this article, this should work for you
https://michelkamp.wordpress.com/category/auditing/
Hi There,
Based on my knowledge, Not all things here can be audited. Below is what i know what can be audited.
1. Who closed the alert from SCOM Console
2. Who put a device in maintenance mode.
3. Who created a subscription
4. When overrides were altered.
5. When a specific agent was deleted even it is a quiet old agent data for the same will be available.
You can also try what Vincez has mentioned as well.