Skip to main content
NetApp Knowledge Base

Search

  • Filter results by:
    • View attachments
    Searching in
    About 6 results
    • Is there any way to save CIFS and NFS audit log separately?
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Is_there_any_way_to_save_CIFS_and_NFS_audit_log_separately
      Applies to ONTAP 9 Answer No, there's no way to save CIFS and NFS audit log separately. Additional Information additionalInformation_text
    • High number of Microsoft event ID 4670: "Permissions on an object were changed" seen in audit logs
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/High_number_of_Microsoft_event_ID_4670__Permissions_on_an_object_were_changed_seen_in_audit_logs
      Applies to ONTAP 9 CIFS auditing Issue After enabling CIFS auditing, the logs show many Microsoft event ID 4670: "Permissions on an object were changed"
    • Cannot disable CIFS auditing
      https://kb.netapp.com/on-prem/ontap/OHW/OHW-KBs/Cannot_disable_CIFS_auditing
      When attempting to disable CIFS auditing the command fails with the following error below: ::> vserver audit disable -vserver TheVserver Error: command failed: Failed to disable auditing for Vserver "...When attempting to disable CIFS auditing the command fails with the following error below: ::> vserver audit disable -vserver TheVserver Error: command failed: Failed to disable auditing for Vserver "TheVserver". Reason: Audit consolidation job not present for the Vserver and one of the possible reasons might be snapmirror break operation in Vserver DR setup. Error: command failed: Cannot enable auditing for Vserver "TheVserver". Reason: Auditing is already enabled for this Vserver.
    • Unable to specify "audit-policy-change" option during CIFS audit creation/modification
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Unable_to_specify_audit_policy_change_option_during_CIFS_audit_creation_modification
      Applies to ONTAP 9 Issue I am unable to specify the audit-policy-change option when doing a vserver audit create or vserver audit modify ONTAP reports the following error message: Error: command faile...Applies to ONTAP 9 Issue I am unable to specify the audit-policy-change option when doing a vserver audit create or vserver audit modify ONTAP reports the following error message: Error: command failed: Using "audit-policy-change" with "-event" is not supported. For further assistance, contact technical support.
    • How to set up NAS auditing in ONTAP 9
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/How_to_set_up_NAS_auditing_in_ONTAP_9
      CIFS auditing with ONTAP 9, NAS auditing ONTAP.
    • MDV staging volume in ONTAP 9.7 is full but destination volume has sufficient space
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/MDV_staging_volume_is_full_even_though_destination_volume_has_sufficient_space
      Applies to ONTAP 9.7 FAS8300,FAS8700,AFF-A400 Issue CIFS share is not accessible due to full audit MDV volume but the destination volume has sufficient space. Audit logs are getting delayed when full ...Applies to ONTAP 9.7 FAS8300,FAS8700,AFF-A400 Issue CIFS share is not accessible due to full audit MDV volume but the destination volume has sufficient space. Audit logs are getting delayed when full MDV volume and NAS access LIF reside in different nodes. Alert: adt.stgvol.nospace generates in EMS log. Wed Sep 29 14:36:08 +0800 [node_name: AuditWorkerThread01: adt.stgvol.nospace:EMERGENCY]: Audit subsystem internal error: Staging volume MDV_aud_aebac68b61604cd191c51a3961e89100 is full.