Zabbix to track windows shared folder access, modify, delete history

[ultratech]

Hi Everyone,

We had windows file server and our everyone is join to domain, we would like to keep track the shared folder access, modify, delete history by which domain user and the time and date. Which template or is it possible for zabbix to do it ?

[vicbc]

Hey Ultra.

Is it possible? It is.
Is it recomended? Not at all.

It actually looks like you need a Log Server. Zabbix is not recommended to be used as such.
What you could do is actually monitor those logs for key metrics.
Let's say you only need to monitor if files from a particular directory are deleted.
If your Windows File Server Auditing is configured, you can use Event Log Monitoring to check the Event Logs, and make use of Regex to gather only the exact info in Zabbix to be triggered.
In the docs there is a session about it (Make sure you're reading the documentation for your Zabbix Server version)

Zabbix Keys for Windows - https://www.zabbix.com/documentation...agent/win_keys
Zabbix Log Monitoring - https://www.zabbix.com/documentation...ypes/log_items

Cheers.