I have a customer who installed AD Audit Plus, which has a built in NetApp plugin. This is to be able to monitor and audit the CIFS shares (approx 9TB in size) they have. This plug-in has a built in feature where it creates its own logs CIFS share. Customer took all the default settings and ran it however once the customer ran it, it took out the newly created logs CIFS share and took the CIFS share offline. Autosupport didnt send out an alert neither did on-command unified manager.
Dose anyone else use this software? I think they are using it as a security monitoring tool as this scans file/folder access, creation and deletions. I just need to understand why Autosupport didn't send out an alert even though its enabled and working as we get all the daily performance and management logs and other disks filling up alerts without issue.
one possible reason is that your auditing or staging (MDV) volumes were full..you might see errors in EMS that shows volume full errors. If you see them for ones that start with MDV_aud those are the staging volumes.
If your staging or audit vol was full and in your audit-guarantee is set to true(default) then this can cause clients from accessing due to inability to audit those events.