locked
monitoring for files EDITED/DELETED from folder or directory. RRS feed

  • Question

  • anyway we can monitor files EDITED/DELETED from folder or directory using SCOM?
    Monday, September 28, 2015 10:09 AM

Answers

  • This can be done via a script. This of course requires knowledge about scripting (could be either PowerShell or vbscript) and management pack authoring.

    I have for example a custom management pack with some workflows that do checks in folders to determine the existing files are recently written. If not this can indicate an issue with this application.

    Doing a check on deleted files can be done if you want to specify each file that must be checked.
    Otherwise you have to create a discovery to discover all files in a folder and monitor each file if it still exists. Only then you end up with a problem that when a file is deleted and a discovery runs the file is removed as a SCOM object. But I don't think you want to go this way anyway. This can result in a huge number of objects and do you honestly want to monitor each file in a folder?

    But to answer your question: is this possible directly from SCOM using the options available from the console: NO.
    Is it possible differently: YES..

    • Proposed as answer by Elton_Ji Thursday, October 8, 2015 7:44 AM
    • Marked as answer by Elton_Ji Saturday, October 10, 2015 1:11 PM
    Monday, September 28, 2015 11:17 AM