Digital Nervous System Making Incredible Software, Incredibly Simple

Orchestrator–Auditing?

If you have started using the Orchestrator 2012 product for some of your test and evaluation work, you likely have also been checking out some of the really cool information shared by Robert Herne and Charles Joy.

One of the first things that I like to do is enable the Auditing functions, however with Orchestrator 2012 some of the folders have been re-organised so where do we find this setting?

The new home is C:Program Files (x86)Microsoft System CenterOrchestrator 2012Opalis Integration ServerManagement Service

image

Just open a console session, and navigate to this folder; there we can run the atlc.exe command with the enable switch to turn on auditing, for example we would run

atlc.exe /enable

image_thumb1

After we enable this, we can run some policys/runbooks and when we go back to the file system we will now see some new audit logs.

The audit logs will be located at the following location’s:

  • _C:Program Files (x86)Microsoft System CenterOrchestrator 2012Opalis Integration ServerManagement ServiceAudit _

  • C:Program Files (x86)Microsoft System CenterOrchestrator 2012Opalis Integration ServerAction ServerAudit

Opening up the .CSV files in the audit folders will then allow us see the audit information, which on the Management Service includes

  • When the Policy was Started

  • Name of the Action Server Used

  • User whom Started the Policy/Runbook

  • and the Name of the Policy/Runbook called

image_thumb2

A new log is created for every 200Mb of data stored.

Have Fun!

Be social and share this post!
Share via OneNote