I created a report which has two Monitoring plans included (one is for file server shares where we don`t audit successful reads, and another is for file server shares where we also audit successful reads). When I want to create Subscription I have few issues that bothers me:
In filters I can`t add more than one Monitoring plan
I want this report to be sent to a file share and there is no need to send it to email. I didn`t check checkbox Attach to email, I just checked Upload to a file share but if I dont add email address to Recipients I cant save this Subscription. I get an error that I need to add a recipient.
And bonus question :):
I think we created two monitoring plans for File server to differentiate data sources which have checkbox checked on audit successful reads. I think it was mentioned as a best practice and now I see It would be easier for us to have one Monitoring plan with all datasources where I can audit successful reads for just some datasources. What would be best practice in this situation?
Regarding the subscription issue, could you please let me know which specific report you’re trying to subscribe to? In many cases, it’s more effective to create a custom search, which you can then save and subscribe to. Custom searches also allow you to include multiple Data Sources and Monitoring Plans, offering greater flexibility.
On the email address requirement, this is necessary because the subscription sends a notification that includes a link to the report results. While the actual file is not attached, an email is still sent to confirm the subscription ran. If you prefer, you can use a non-monitored email address.
As for your bonus question, the setup you’ve described—with each file server in its own monitoring plan—is the recommended approach. This is especially true for larger file servers. While very small file servers could potentially be grouped, keeping them separate ensures better performance and more granular auditing. Additionally, the audit settings such as the successful and failed reads and changes are configured at the plan level—not per item—so separating them maintains clarity and control. You’ll also want to avoid mixing different Data Source types (e.g., File Servers and Windows Servers) in the same plan.
Looking forward to helping you with the subscription setup—just let me know which report you’re working with and I’ll be happy to guide you on the best configuration.