Who creatE a rule in SCOM 2012?

I have some news rules in SCOM 2012 and I would like to know who create that, I wnat to identify what admin created this.

Thank you,

May 28th, 2015 10:11am

Take a look at this article, this should work for you

https://michelkamp.wordpress.com/category/auditing/

Free Windows Admin Tool Kit Click here and download it now
May 28th, 2015 10:23pm

As far as i know, SCOM has no built-in mechanism to trace who create or modify rule or monitor. One of the way is following Michel blog on Audit SCOM SDK Usage Operations.
https://michelkamp.wordpress.com/category/auditing/
Roger
May 29th, 2015 12:10am

Hi There,

Based on my knowledge, Not all things here can be audited. Below is what i know what can be audited.

1. Who closed the alert from SCOM Console

2. Who put a device in maintenance mode.

3. Who created a subscription

4. When overrides were altered.

5. When a specific agent was deleted even it is a quiet old agent data for the same will be available.

You can also try what Vincez has mentioned as well.

Free Windows Admin Tool Kit Click here and download it now
May 31st, 2015 2:34pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics