Audits for snapshots that were created before enabling CIFS Audits show unavailable
Applies to
- ONTAP 9
- CIFS Audit
Issue
- Enabled CIFS auditing and set SACLs on volume which had multiple point in time copy (snapshots) already exists.
- Accessing snapshots that are taken after audit enable, it's generating audit events but snapshots that were taken before enabling audits do not generate logs.