https://community.netapp.com/t5/ONTAP-Discussions/Problem-auditing-snapshot/m-p/135189#M29657 <P>there's command "volume snapshot event-config modify" on 8.3. but enabling this might cause excessive logging into /mroot.</P> Thu, 12 Oct 2017 09:18:26 GMT Jeff_Yao 2017-10-12T09:18:26Z https://community.netapp.com/t5/ONTAP-Discussions/Problem-auditing-snapshot/m-p/134940#M29594 <P>Hello,</P><P>&nbsp;</P><P>&nbsp; I want to use auditing to detect if anyone has accessed /~snapshot. We are using cluster mode 8.x.</P><P>When testing this my results are eratic. Sometimes accessing a prevous version of a file is captured in the audit log but usually not.</P><P>Any ideas?</P><P>&nbsp;</P><P>-sbennett1298</P> Wed, 04 Jun 2025 14:31:51 GMT https://community.netapp.com/t5/ONTAP-Discussions/Problem-auditing-snapshot/m-p/134940#M29594 sbennett1298 2025-06-04T14:31:51Z https://community.netapp.com/t5/ONTAP-Discussions/Problem-auditing-snapshot/m-p/135189#M29657 <P>there's command "volume snapshot event-config modify" on 8.3. but enabling this might cause excessive logging into /mroot.</P> Thu, 12 Oct 2017 09:18:26 GMT https://community.netapp.com/t5/ONTAP-Discussions/Problem-auditing-snapshot/m-p/135189#M29657 Jeff_Yao 2017-10-12T09:18:26Z