But, I don't understand, now I see the EVTX file and I can open them but all with Event ID 4634 and the description is:
"The description for Event ID 4634 from source NetApp-Security-Auditing cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer."
Re: Unable to create Audit configuration on volumes