Network Automation Software We are currently migrating this forum
over to our HelpSystems domain. Please
post all new threads in our new
HelpSystems Community Portal.
Post to the HelpSystems Forum
You are not currently logged on. You must be logged on in order to post. Log on
Or Create a new account
AutoMate Discussion
Decrease font size
Increase font size
Topic Title: File Opened Notification
Topic Summary: Trying to create a solution to notify when a file has been opened
Created On: 04/05/2018 04:23 PM
Status: Read Only
Linear : Threading : Single : Branch
Search Topic Search Topic
Topic Tools Topic Tools
View similar topics View similar topics
View topic in raw text format. Print this topic.
 04/05/2018 04:23 PM
User is offline View Users Profile Print this message

Author Icon
EjStanley
Journeyman (50-99)

Posts: 80
Joined: 08/17/2010

I'm trying to come up with a solution using Automate Enterprise 11 to send a notification when a file has been opened. The file is currently on the same server as the Automate agent and the directory which the file(s) reside is a network share. My thought was to utilize the event viewer security logs for Event ID 4656. I ensured the shared folder was setup for auditing correctly and I can see the audit events in the event viewer.

I tried to setup an Event Viewer condition/trigger and configured it as follows:

Log: Security
Source: Microsoft-Windows-Security-Auditing
Type: Successful Audit (also tried Informational here)
Category: All Categories
Description: *

I could get the event viewer to work but due to the high number of security audits, it flooded the system and caused havoc . I was hoping to get some help with using the * in the Description field to narrow the output down to the directory path where I want to monitor, something like *C:\folder\folder\folder\File.txt*. However, I couldn't get this to work in any way using any of the text that I took from an actual event from the event log.

Any thoughts on how to solve this or other ideas on how to notify on when a file is opened (not modified/added,etc)
 04/12/2018 07:49 AM
User is offline View Users Profile Print this message

Author Icon
Alex Escalante
HelpSystems

Posts: 871
Joined: 02/26/2014

Hello EJ,

Does the machine that will be opening the file have a AutoMate agent installed on it? If so, we can use a "window trigger" to execute a task whenever that file actually opens on the screen.

If you want a notification for any user opening that file, then the security log is probably your best bet, but the description would need to show the specific name of the file in question.

Here are other possible solutions which are a a bit outside of AutoMate. For example, you can create a sharepoint script which accomplishes your goals, then we can use our sharepoint action to run that script:

https://social.technet.microsoft.com/Forums/en-US/c78c9daa-c7b7-4c4a-8002-feb1cc66be94/how-to-setup-a-file-openread-alert-in-sharepoint-2010-enterprise?forum=sharepointgeneralprevious

Or you can use an audit to check for the file being opened through windows, then use AutoMate to review the log entry/temp file it creates to trigger a task:

https://blogs.technet.microsoft.com/mspfe/2013/08/26/auditing-file-access-on-file-servers/

Again, these are outside of AutoMate, so you will probably need to consult with your IT team to work further on these types of solutions.

thanks.

-------------------------

Alex Escalante | Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700 | F: +1.213.738.7665
Statistics
18258 users are registered to the AutoMate Discussion forum.
There are currently 0 users logged in.
The most users ever online was 5551 on 01/08/2018 at 11:11 AM.
There are currently 491 guests browsing this forum, which makes a total of 491 users using this forum.

FuseTalk Enterprise Edition v4.0 - © 1999-2019 FuseTalk Inc. All rights reserved.

Sitemap Network Automation Software Blog