1

I think i got the Audit Collection service working.

Where do I see the Audit Logs from my Managed Agents?

I looked in my Operations Manger Console: Monitoring - Microsoft Audit Collection Services - *

Where do I see the Logs?

Where are the logs Stored in the Database - in Which Table I do see the following tables: in Server\OPSMGRAC - Databases - OperationsManager - Tables:

dbo.dtCategory

dbo.dtConfig

dbo.dtMachine

dbo.dtPartition

dbo.dtSource

dbo.dtType

Thanks for reply.

Joel
  • 237
  • 2
  • 12

1 Answers1

1

Which version of SCOM are you using? In my 2007 install, its a view not a table. Use adtServer.dvAll5 which contains only the first 5 event params, or adtServer.dvAll which has ALL params, but it slower.

Clayton
  • 4,523
  • 17
  • 24
  • 1
    Im Using SCOM2012R2. where do i Find `adtServer.dvAll5`? is it at the SQL-server or at the Operations Manager – Joel Jan 16 '15 at 07:30
  • 1
    its in the SQL-Database. Databases - OperationsManager - Views – Joel Jan 16 '15 at 08:06
  • Is there another way to look them up in Operations Manager? – Joel Jan 20 '15 at 11:58
  • Look up what exactly? The tables, views, or the data within? For data use SSRS. Have you reviewed the product doc? Search for "audit reports" at http://blogs.technet.com/b/fesiro/archive/2013/01/08/how-to-deploy-audit-collection-services-acs-in-scom-2012.aspx – Clayton Jan 20 '15 at 14:39
  • im searching for the actual events, which the collector collects – Joel Jan 20 '15 at 14:46
  • IIRC, it does not collect anything by default. It only collects events which meet the filter criteria you define... Please review doc in order to ask better/more specific questions. – Clayton Jan 20 '15 at 15:31