Endpoint Administration Guide for Windows › Monitoring and Auditing › Monitoring Access Control Activity › Filtering Trace Records

Filtering Trace Records

Using a trace filter file, you can specify that certain types of activity should not appear in the trace file. The trace filter file is specified with the trace_filter value in the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\SeOSD

The default value is ACInstallDir\log\trcfilter.ini (where ACInstallDir is the directory where you installed CA ControlMinder).

Important! CA ControlMinder creates the trace filter file at installation with the single line: *seosd.trace*. Never delete this record.

Each line in the trace filter file represents an access or an activity that should not be traced. For example, to eliminate tracing the users' access to Microsoft Word, add the following line to the trace filter file:

*winword.exe*