CONTAP-240415: Outputting CIFS audit logs fails if NTFS long path is used and file path length longer than 30000 characters

Last updated

Apr 2, 2025
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 36

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nas

Last Updated:: 4/2/2025, 3:30:23 PM

Issue

CIFS audit log generation repeatedly fails at the same point for a particular object.
There is a record which has a UNC path length longer than 30000 characters.

mpaudit.log includes following lines:

[00000004.00002e45 0000462e Sat May 11 2024 08:34:49 -07:00 [kern_mpaudit:info:10817] 0x80ba09000: 0: ERR: vserver1: return 8220 {in putData() at src/AuditConsolidationData.cc:362}]
[00000004.00002e46 0000462e Sat May 11 2024 08:34:49 -07:00 [kern_mpaudit:info:10817] 0x80ba09000: 0: ERR: vserver1: return 8220 {in audit_main() at src/AuditMain.cc:166}]
[00000004.00002e47 0000462e Sat May 11 2024 08:34:49 -07:00 [kern_mpaudit:info:10817] 0x80ba09000: 0: ERR: vserver: return 8220 {in consolidation() at src/AuditJob.cc:164}]
[00000004.00002ef2 00004ae3 Sat May 11 2024 08:36:51 -07:00 [kern_mpaudit:info:10817] 0x80ba09000: 0: INFO: vserver1: Consolidation Fails[8220]!! [0] records consolidate in [130] milliseconds {in audit_main() at src/AuditMain.cc:234}]
[00000004.00002ef3 00004ae3 Sat May 11 2024 08:36:51 -07:00 [kern_mpaudit:info:10817] 0x80ba09000: 0: ERR: vserver1: return 8220 {in consolidation() at src/AuditJob.cc:164}]
[00000004.00002ef4 00004ae3 Sat May 11 2024 08:36:51 -07:00 [kern_mpaudit:info:10817] 0x80ba09000: 0: INFO: vserver1: Not changing the opstate to clear as there are audit records belonging to Vserver[vserver1] which cannot be consolidated due to error[8220] {in start() at src/AuditJob.cc:399}