Open-AudIT
https://www.open-audit.org/phpBB3/

What Frequency Of Audit Is Best/Recommended
https://www.open-audit.org/phpBB3/viewtopic.php?f=20&t=3886
Page 1 of 1

Author:  Fazza [ Fri Nov 26, 2010 12:22 am ]
Post subject:  What Frequency Of Audit Is Best/Recommended

At the moment I have the audit set to run every 2 hours - will this fill the database too quickly or is every 2 hours a reasonable frequency?

We're a 24hr operation (well half of the business is anyway) and I just chose every 2 hours out of thin air!

8)

Author:  jpa [ Mon Nov 29, 2010 7:19 am ]
Post subject:  Re: What Frequency Of Audit Is Best/Recommended

[quote="Fazza"]I just chose every 2 hours out of thin air!
Unless you need to see changes that happen within two hours I'd suggest reducing your auditing frequency. I haven't really looked hard but I suspect the WMI machine audit is not very CPU friendly. Every two hours seems a bit excessive.

Author:  Mark [ Mon Nov 29, 2010 10:32 am ]
Post subject:  Re: What Frequency Of Audit Is Best/Recommended

Personally, I set it for a daily audit.

Author:  shanimal [ Wed Dec 01, 2010 7:07 am ]
Post subject:  Re: What Frequency Of Audit Is Best/Recommended

We have run it up to 3 times per day. We scan a windows domain where the majority of systems are laptops so it's hit or miss for laptops if you only run once a day. If you are mostly desktops and servers then I think once per day is perfect.

Author:  Mark [ Wed Dec 01, 2010 10:50 am ]
Post subject:  Re: What Frequency Of Audit Is Best/Recommended

Laptops that only connect every xyz to the internal network are a pain.
Any thoughts/suggestions on how we can get a more reliable scan of these items would be appreciated.

Author:  smason [ Thu Mar 10, 2011 6:19 am ]
Post subject:  Re: What Frequency Of Audit Is Best/Recommended

I'm in the same boat. Lots of notebooks coming and going.
I do 2 audits a day, and hope to catch them.

What would be nice, is something in the script that checks if an audit has already been done today, then don't do another. That way you could run it once an hour even, and not worry about hammering computers that have already been audited today.

Author:  jpa [ Thu Mar 10, 2011 7:04 am ]
Post subject:  Re: What Frequency Of Audit Is Best/Recommended

You could just run the audit per machine in the Computer logon script.

Author:  nausea [ Thu May 26, 2011 4:05 am ]
Post subject:  Re: What Frequency Of Audit Is Best/Recommended

Once a day. I have the login script call the audit.vbs script.

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/