I am new to using LEM, and have found that out of the box, Windows has a lot of auditing occuring that is creating issues in making reports with LEM. When I run a report for a few hour period, I have thousands of events logged. It turns out that Windows 7 has multiple folders flagged for logging from the get go. How do you configure LEM and Windows to be ale to just have the file shares audited. That is really the only information we need access to at this time. Any help would be appreciated.
Joshua