topic Re: Audit file folder access from specific IP in ONTAP Discussions

Audit file folder access from specific IP

ECEDERGREN — Wed, 04 Jun 2025 10:56:30 GMT

I'm looking for a way to see when users access CIFS on specific SVM from specific IP what files they are accessing.

Have a network segment will be isolating and want to verify if clients in this range are accessing CIF shares.

SpindleNinja — Thu, 20 Aug 2020 15:06:36 GMT

Basic CIFS Audit will have what you need. You can collect the load (use the XLM collect) and grab the file and search via IP.

ECEDERGREN — Tue, 25 Aug 2020 13:10:07 GMT

Looks like security trace filters will do what I need. Thanks for pointing me in right direction.

parisi — Tue, 25 Aug 2020 13:44:49 GMT

Keep in mind you don't want to keep security trace filters enabled indefinitely (if you're referring to vserver security trace).

Instead, use native SMB audit or a 3rd party fpolicy server.

SpindleNinja — Tue, 25 Aug 2020 14:04:23 GMT

No problem Eric, and keep in mind what @parisi said.