Windows file acess auditing with CIFS protocal

AllenChang — Tue, 30 Jul 2024 00:18:52 GMT

I want to see the cifs file access auditing log by using windows audit function,

so I enable file "Audit Object Access" in "Default Domain Gorup Policy"

and I config the file access auditing for the cifs sharing of my svm

But the question is

Where I can see the auditing log in windows?

Thanks

Re: Windows file acess auditing with CIFS protocal

ChLokesh — Tue, 30 Jul 2024 12:22:15 GMT

The audit share contains the active audit.log file and any compressed audit log files. For easy access to audit logs, you can configure client access to audit shares for both NFS and CIFS (CIFS is deprecated). You can also access audit log files directly from the command line of the Admin Node.

https://docs.netapp.com/us-en/storagegrid-116/audit/accessing-audit-log-file.html

Here is how to configure NAS auditing: https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/How_to_set_up_NAS_auditing_in_ONTAP_9

topic Re: Windows file acess auditing with CIFS protocal in Network and Storage Protocols

Windows file acess auditing with CIFS protocal

Re: Windows file acess auditing with CIFS protocal