Problem auditing ~snapshot



  I want to use auditing to detect if anyone has accessed /~snapshot. We are using cluster mode 8.x.

When testing this my results are eratic. Sometimes accessing a prevous version of a file is captured in the audit log but usually not.

Any ideas?



Re: Problem auditing ~snapshot

there's command "volume snapshot event-config modify" on 8.3. but enabling this might cause excessive logging into /mroot.

Cannot find the answer you need?  No need to open a support case - just CHAT and we’ll handle it for you.