I need to make an small system for Fault Reappearance.
I have been changing parameters in profile.cfg file of FSCT to meet the requirements below but it has never reached expectation.
# Requiremens
- 500MB/min log should be written to the security log(eventlog)
- Set volume D to audit sucess and failure events in Fileserver.
- Set quota for the directory of security log(%SystemRoot%\System32\Config) in Fileserver.
# FSCT(v1.2) components
- 2 clients
- ActiveDirectory (created 3500 domain users for fsct test)
- FSCT controller
- File Server ( volume D: 200GB with audit of success and failure and Quota setting)
(Windows Server 2012 R2 x 5 on AWS / Clients: c4.2xlargec,
AD: t2.micro, Others: c4.xlarge)
# profile.cfg
- wordfileopen 500
- wordeditandsave 500
# result
- security log 300MB/300sec
- CPU utils (maximum) around 40%
I'm not sure increasing some values in profile.cfg would be efficient.
I'm also wondering security log would be bigger if I add more users in the domain.
Best Regards,
Kazuo Ieiri