For Windows and Novell filter by:

• Windows event log type
• time of day
• successful or unsuccessful
• specified users
• specified nodes/machines
• alerting options
• Windows NT/2000 filtering
• Event log data

Login filter:
LT Auditor's login filter enables the tracking of all authentication to the network, including failed attempts to login - these can often be an indication of intruders attempting to use other users' login details.

Reporting is available on all logins or failed logins as well as reporting on the total time logged into the network.

File Filters: 
Novell file filters provide the same configuration options as listed above and allow specification of the auditing of file activity ranging from an entire server to a specific path or file name.

NDS/eDirectory filter:
Novell NDS filters provide the same configuration options as listed above and allow specification of all or just specific NDS or eDirectory attributes.

Server filter:
Novell server filters provide the standard configuration options as above and allow tracking of mounts and dismounts of server volumes, NLM loads/unloads, downing of servers and remote console access.