I'm trying to write a rule in Solarwinds LEM to alert me via email when a change is made to one of my web server applications web.config file and I can't seem to get anything to work? Can anyone provide a screen shot or something on how I can setup a rule to do this? I've tried messing with the windows audit stuff as outlined here: http://knowledgebase.solarwinds.com/kb/questions/2833/Audit+Policy+and+Best+Practice but I think my problem is more in the RULE itself? I've tried using FileAudit, FileDataWrite and FileWrite Events as well as "File Audit Alerts" Event Groups - but I can't get anything to fire?!
Any help would be appreciated as this is one of the main reasons we bought this thing - to monitor and alert us when key files (like web.config files) have been modified on our network!?
Thanks,
Jeff M.