Who modified an override

Dashboard Server
1

Is there anywhere I can look that can show who changed an over ride? I just found a bunch of class over rides missing which caused us to not get alerted.

2

Unfortunately, it is not possible. There’s no auditing in SCOM. However there’s a uservoice request, you can vote it:

https://systemcenterom.uservoice.com/forums/293064-general-operations-manager-feedback/suggestions/9071497-auditing-changes-in-scom

 

Cheers

1 Like
3

FYI, this is now possible via SCOM 2019 UR2.

https://kevinholman.com/2020/08/04/ur2-for-scom-2019-step-by-step/

Cheers

4

I think if the override doesn’t exist you’ve even less chance of finding out who modified it than when they are just overridden! Auditing is one of those areas which is sadly lacking.