What tool to monitor SMB/CIFS share activities (File deletion, etc)

[Andy2022]

Hi everyone,

Can you suggest a native or 3rd party tool to monitor SMB/CIFS share contain ?

We want to know who deleted, moved files/folders on the share. I search and read the knowledge base but cannot find any solution.

If you know Windows FSRM role. It's basically the same but for ONTAP.

Thanks in advance.

[elementx · Accepted solution]

As explained here (https://docs.netapp.com/us-en/ontap/nas-audit/index.html) there's on-box auditing [1] and external auditing s/w that processes FPolicy events from ONTAP system [2].

The process of configuring [1] is described in [3].

[1]

https://kb.netapp.com/onprem/ontap/da/NAS/How_to_set_up_CIFS_auditing_in_ONTAP_9

[2]

https://kb.netapp.com/onprem/ontap/da/NAS/FAQ%3A_FPolicy%3A_Auditing

[3]

https://docs.netapp.com/us-en/ontap/nas-audit/configur-policies-ntfs-security-concept.html#configuring-ntfs-audit-policies-using-the-windows-security-...

[Sanaman]

Veritas DataInsight (external-engine) works well with OnTap FPolicy.