Skip to main content
NetApp Knowledge Base

Search

  • Filter results by:
    • View attachments
    Searching in
    About 6 results
    • https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Is_it_recommended_to_set_audit_policy_through_SLAG
      Applies to ONTAP 9 Storage-Level Access Guard (SLAG) Audit NTFS permissions Answer Configure SLAG with ONTAP commands to configure NTFS file permissions and auditing policies Additional Information Co...Applies to ONTAP 9 Storage-Level Access Guard (SLAG) Audit NTFS permissions Answer Configure SLAG with ONTAP commands to configure NTFS file permissions and auditing policies Additional Information Configure and apply audit policies to NTFS files and folders using the CLI overview
    • https://kb.netapp.com/on-prem/ontap/DP/SnapLock/SnapLock-KBs/How_many_SnapLock_auditing_volumes_are_needed
      Applies to ONTAP 9.x SnapLock Answer SnapLock logging is per SVM level SnapLock log can be only one per SVM The auditing volume must be SnapLock volume Additional Information Create an audit log
    • https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/How_to_increase_size_of_ONTAP_CIFS_auditing_MDV_staging_volume
      Applies to ONTAP 9 Description The CIFS auditing relies on the Consolidation of data stored temporarily in audit staging volumes. If these volumes fill prior to the completion of the audit consolidati...Applies to ONTAP 9 Description The CIFS auditing relies on the Consolidation of data stored temporarily in audit staging volumes. If these volumes fill prior to the completion of the audit consolidation process, audit consolidation can fail. Due to this, The CIFS access will experience disruption if audit-guarantee is enabled. EMS.Log:[node01: AuditWorkerThread01: adt.stgvol.nospace:EMERGENCY]: Audit subsystem internal error: Staging volume MDV_aud_0ade1c55884e44ad80ca123eff96b2ac is full.
    • https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Does_ONTAP_audit_file_access_events_via_CIFS_NFS
      Applies to ONTAP 9 CIFS Auditing Answer By default, ONTAP does not audit, record, or log file access events via NAS protocols While it is possible to configure NAS auditing and/or Fpolicy for auditing...Applies to ONTAP 9 CIFS Auditing Answer By default, ONTAP does not audit, record, or log file access events via NAS protocols While it is possible to configure NAS auditing and/or Fpolicy for auditing, this must be configured prior to an access event Events can not retroactively be audited if an auditing configuration did not exist at the time of file access Additional Information NAS auditing - FAQ SMB and NFS auditing and security tracing FPolicy: What is it and what does it do?
    • https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Audit_log_rotation_based_on_schedule_does_not_work
      Audit log rotation based on schedule is ignored Example : Based on log size and schedule: Log Destination Path: /audit Log File Size Limit: 1MB Log Rotation Schedule: Month: January-December Log Rotat...Audit log rotation based on schedule is ignored Example : Based on log size and schedule: Log Destination Path: /audit Log File Size Limit: 1MB Log Rotation Schedule: Month: January-December Log Rotation Schedule: Day of Week: Sunday-Saturday Log Rotation Schedule: Day: - Log Rotation Schedule: Hour: 0-23 Log Rotation Schedule: Minute: 0-59 Log Files Rotation Limit: 0 Log Retention Duration: 0s Audit log rotation based on the schedule does not work Audit log rotation based on the size is working
    • https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/How_to_enable_auditing_of_NFS_events_in_ONTAP_9
      Article covers the steps how to enable auditing of NFS events on ONTAP 9 systems