Orchestrator–Auditing?4 July 2011 1 min read.
If you have started using the Orchestrator 2012 product for some of your test and evaluation work, you likely have also been checking out some of the really cool information shared by Robert Herne and Charles Joy.
One of the first things that I like to do is enable the Auditing functions, however with Orchestrator 2012 some of the folders have been re-organised so where do we find this setting?
The new home is C:Program Files (x86)Microsoft System CenterOrchestrator 2012Opalis Integration ServerManagement Service
Just open a console session, and navigate to this folder; there we can run the atlc.exe command with the enable switch to turn on auditing, for example we would run
After we enable this, we can run some policys/runbooks and when we go back to the file system we will now see some new audit logs.
The audit logs will be located at the following location’s:
_C:Program Files (x86)Microsoft System CenterOrchestrator 2012Opalis Integration ServerManagement ServiceAudit _
C:Program Files (x86)Microsoft System CenterOrchestrator 2012Opalis Integration ServerAction ServerAudit
Opening up the .CSV files in the audit folders will then allow us see the audit information, which on the Management Service includes
When the Policy was Started
Name of the Action Server Used
User whom Started the Policy/Runbook
and the Name of the Policy/Runbook called
A new log is created for every 200Mb of data stored.
Have Fun!Tags: Automation · SCORCH · WS/SC Previous Post: Exchange–Active Sync Devices in the last 7 Days Next Post: SCVMM2012 Beta–Windows 2008 R2 SP1 Physical Deployment Fails