RSHINPUTCOMMAND showing constantly in AuditLog

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 20

Visibility:: not set

Votes:: 0

Category:: netapp_console

Specialty:: ds_rp

Last Updated:

Applies to

Cloud Volumes ONTAP(CVO) 9.16.1P9, 9.17.1P2, or 9.18.1RC.

Issue

Audit log is constantly spewing RSHINPUTCOMMANDs similar to:

Sat Jan 31 18:53:27 CET [CVO-01:rshd_0:debug]:Cluster%diag%admin@[127.0.0.1_xxx]:IN:nodeshell:RSHINPUTCOMMAND is privset-qdiag;options arw.use.wex.for.i2p

Cause

Anti-Ransomware Protection is enabled on a volume, or multiple volumes, which can be checked here.

Solution

The Auditlog messages should not be appearing and will be removed in a bugfix.

Partner Notes

partnerNotes_text

Additional Information

additionalInformation_text

Internal Notes

internalNotes_text