topic Missing log files in /etc/log/? in ONTAP Discussions

Missing log files in /etc/log/?

ben_tyson — Thu, 05 Jun 2025 06:48:31 GMT

Hi,

If I miss some files in /etc/log/, for example if I have auditlog, auditlog.0 and auditlog.5 should I be worried about that or has it just been very quiet and nothing has happened? I expect the system to create empty files even if nothing happens so that I can know that nothing happened but don't know for sure if NetApps do. There are an actual gap in dates in the files too.

Sincerely

Kristoffer & Ben

Re: Missing log files in /etc/log/?

andrc — Wed, 10 Aug 2011 00:17:09 GMT

I'm not aware of any reason why that would happen. I would keep monitor the situation and if logfiles continue to disappear or fail to generate in the first place I would open a Tech Support case with the GSC.

It's also worthwhile checking the share/export permissions on C$, ETC$ and /vol/<rootvol> to ensure someone isn't accessing and messing around with things they shouldn't be....