CIFS auditing in cluster mode

krishgudd — Wed, 04 Jun 2025 14:53:26 GMT

Hi All,

I have configured cifs auditing in clustered ontap and to view the audit events i opened the evtx file in Microsoft Management console. I am seeing a message like

The description for Event ID 4663 from source NetApp-Security-Auditing cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

The message says that the source NetApp-Security-Auditing cannot be found. Do we need to install any source type to view the events properly.

Regards,

Krishgudd

Re: CIFS auditing in cluster mode

krishgudd — Wed, 05 Jul 2017 19:41:31 GMT

Seems like this is a bug and not fixed in any ONTAp version.

https://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=906536

topic Re: CIFS auditing in cluster mode in ONTAP Discussions

CIFS auditing in cluster mode

Re: CIFS auditing in cluster mode