Skip to main content
NetApp Knowledge Base

SVM audit state is unintentionally changed to false after audit log destination volume become full

Views:
28
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
cifs
Last Updated:

Applies to

  • ONTAP 9
  • CIFS Audit
  • ALog ConVerter

Issue

  • SVM audit state is unintentionally changed to false in the following situation.
    • ALog ConVerter is used.
    • Audit log destination volume is full.
  • /etc/log/mlog/audit.log of ONTAP indicates that the audit state was changed manually.

Example:

node01:ssh :: pii_encrypt/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/pii_encrypt :: node01:admin :: vserver audit disable -vserver "svm1" :: Pending

node01:ssh :: pii_encrypt/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/pii_encrypt :: node01:admin :: vserver audit disable -vserver "svm1" :: Success

 

Scan to view the article on your device
CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support