Configure file access tracking

  1. In the SafeGuard Management Center, select Policies.
  2. Create a new Logging policy or select an existing one.

    In the action area on the right-hand side under Logging, all predefined events which can be logged are displayed. By clicking on the column headers you can sort the events by ID, Category etc.

  3. To activate file access tracking select the following log events depending on your requirements:
    • for files stored on removable media:
      • ID 3020 File tracking for removable media: a file has been created.
      • ID 3021 File tracking for removable media: a file has been renamed.
      • ID 3022 File tracking for removable media: a file has been deleted.
    • for files stored in cloud storage:
      • ID 3025 File tracking for cloud storage: a file has been created.
      • ID 3026 File tracking for cloud storage: a file has been renamed.
      • ID 3027 File tracking for cloud storage: a file has been deleted.
    To specify that an event is to be logged in the SafeGuard Enterprise Database, select the event by clicking in the column showing the database icon Log events in database. For events to be logged in the Windows Event Viewer, click in the column showing the event log icon Log in event log.
    For all events selected, a green check mark is displayed in the relevant column.
  4. Save your settings.
After assigning the policy, file access tracking is activated and the selected events are logged in the relevant output destination.
Note: Be aware that enabling file access tracking significantly increases the server load.