topic Re: 7MODE - CIFS audit Netapp - User Sessions in ONTAP Discussions

7MODE - CIFS audit Netapp - User Sessions

MiguelTRX — Wed, 04 Jun 2025 09:47:05 GMT

Hi everyone!

I was wondering if there is any way in Netapp 7mode to see throught the cifs auditing ,the domain user history access for the NAS.

Regards!

Re: 7MODE - CIFS audit Netapp - User Sessions

cedric_renauld — Wed, 19 Jul 2023 12:21:20 GMT

Hello,

You need to enable the CIFS auditing, by options cifs. ... somewath

And the better way is to send this event to a log server, or you can read them in a file on the /etc if i remember well

Re: 7MODE - CIFS audit Netapp - User Sessions

MiguelTRX — Wed, 19 Jul 2023 13:24:38 GMT

Hi.

Yeah well. The options cifs it running already and audit its being saved.

Cant use log server as this a quite isolated storage system. So the question now is ... wich is the file in /etc/log that provides with that information??? How can it be opened?

Thanks in advance!

Re: 7MODE - CIFS audit Netapp - User Sessions

cedric_renauld — Thu, 20 Jul 2023 04:59:07 GMT

Hi,

The informations was in .EVT file, you can read them by your Windows Event viwer

But you need copy files on your computer and read them after

Have you access to this page :

https://kb.netapp.com/onprem/ontap/da/NAS/7-mode_How_to_set_up_CIFS_auditing_on_the_controller