Skip to main content
NetApp Knowledge Base

Unable to Disable SVM Auditing Due to Missing Audit Consolidation Job

  1. Last updated
  2. Save as PDF
Views:
31
Visibility:
Public
Votes:
0
Category:
fsx-ontap
Specialty:
cloud
Last Updated:

Applies to

  • Amazon FSx for NetApp ONTAP(Optional)
  • ONTAP 9.17.1PX

Issue

Attempts to disable auditing on an SVM (vserver) fail with an error similar to:

Error: command failed: Failed to disable auditing for Vserver "svm1". Reason: Audit consolidation job not present for the Vserver and one of the possible reasons might be SnapMirror break operation in Vserver DR setup. Retry after some time.

Additional symptoms:

  • vserver audit show indicates auditing is enabled.
  • The consolidation job is missing from the job schedule (job show *cons* returns no entries).
  • Audit logs are not being moved to the audit log directory.
  • The operational state in the internal database (debug smdb table vserver_audit_config_db show-fields opstate shows as “normal”).
  • No SnapMirror relationships or volume full conditions are blocking the operation.

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.