Skip to main content
NetApp Knowledge Base

How to enable auditing of NFS events in ONTAP 9

Last Updated:

Applies to

  • ONTAP 9
  • NFS


  • This article describes the procedure that should be followed to enable file and folder auditing for files and folders accessed, modified, or deleted using NFS (NFSv3 or NFSv4)
  • In order for ONTAP to audit NFS events, NFSv4 has to be enabled when you run the vserver nfs create command. 
    • Once the ACL's are applied to the files/directories, NFSv4 is no longer a requirement for the mount or SVM
  • Depending on the environment and which NFS versions are enabled, this KB will provide optional steps to disable v4 functionality.  NFSv3 events will continue to be audited after v4 is disabled
  • This will create an XML files that will grow to no larger than 100M in size.  (NFS Best Practices TR-4067, page 69)


Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.