topic Re: CIFS / NTFS Auditing in Network and Storage Protocols

CIFS / NTFS Auditing

tyrone_owen_1 — Wed, 04 Jun 2025 10:59:00 GMT

Hi,

I am really struggling with the concept of CIFS / NTFS auditing.

'vserver audit command enables or disables auditing, defines log location files, manages log rotation,
and so on.'

The vserver create command also includes the following parameters:

{file-ops|cifs-logon-logoff|cap-staging|file-share|audit-policy-change|user-account|authorization-policy-change|security-group}

The vserver create command seems to include file/folder event logging, so why do I need to then go on to use the 'vserver security file-directory ntfs' commands to create SACLs on files and folders?

Thanks

Re: CIFS / NTFS Auditing

hmoubara — Tue, 04 Aug 2020 01:51:54 GMT

Hello

Can you share which documentation you following when setting up auditing.

Thanks

Re: CIFS / NTFS Auditing

tyrone_owen_1 — Tue, 04 Aug 2020 08:09:58 GMT

https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cifs-nfs-audit%2FGUID-E31BC272-031E-4933-9892-2C96E77848D6.html

Re: CIFS / NTFS Auditing

hmoubara — Wed, 05 Aug 2020 04:35:50 GMT

Hello,

I am not seeing where in the documentation it is telling you to create SACLs:

vserver security file-directory ntfs ??

You should be able to enable auditing and set it to whatever options you would like the auditing to be logged.

Check the link below:

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.dot-cifs-nfs-audit/GUID-EF25376D-4460-4493-B260-C2FDAAB6B151.html

Thanks

Re: CIFS / NTFS Auditing

tyrone_owen_1 — Wed, 05 Aug 2020 08:20:18 GMT

Hi,

Here:https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cifs-nfs-audit%2FGUID-2D266735-3959-4144-8DA9-C068EEBC202E.html&resultof=%22%43%6f%6e%66%69%67%75%72%69%6e%67%22%20%22%63%6f%6e%66%69%67%75%72%22%20%22%61%75%64%69%74%22%20%22%70%6f%6c%69%63%69%65%73%22%20%22%70%6f%6c%69%63%69%22%20%22%4e%54%46%53%22%20%22%6e%74%66%22%20%22%73%65%63%75%72%69%74%79%2d%73%74%79%6c%65%22%20%22%66%69%6c%65%73%22%20%22%66%69%6c%65%22%20%22%64%69%72%65%63%74%6f%72%69%65%73%22%20%22%64%69%72%65%63%74%6f%72%69%22%20

Thanks,