Is there any impact of changing ONTAP audit log rotation settings?
Applies to
ONTAP 9
Answer
- No, there is no impact on ONTAP services or cause service disruption when changing audit log rotation settings.
- Existing audit log files created under previous settings are not deleted or affected by the new rotation schedule.
- Old audit log files remain on the destination volume until manually deleted.
- New audit log files generated after the configuration change follow the new rotation policy and retention limits.
- Only audit logs created under the new settings are rotated and deleted automatically when exceeding the configured file count limit.
- Note:
- If audit event volume is high, single daily files may be large. Monitor available space on the destination volume regularly.
- When the number of log files exceeds the limit, ONTAP deletes the oldest files first (only those created under the new settings).
- Manual deletion is required for any legacy audit log files not managed by the current rotation policy.
Additional Information
additionalInformation_text
