Evtx files output by vserver audit includes files with :xxxxx appended to the original file name
Applies to
- ONTAP 9
- vserver audit
- Alternate Data Stream(ADS)
Issue
Evtx files includes files with :xxxxx appended to the original file name.
Example:
There is a only file named as test.txt in a directory.
But evtx shows some records like test.txt:data1, test.txt:data2 and test.txt:Zone.Identifier other than test.txt