Thank you Steven, for your Reply.
Yes, you are right. I want to get the the auditlog for a VFiler.
With the PowerShell-Command Get-Eventlog -Logname "Security" -computer <VFiler> i get the Security log from my VFiler. But the format is not right.
Look here:
Index Time EntryType Source InstanceID Message
----- ---- --------- ------ ---------- -------
4520 Aug 13 07:50 SuccessA... Security 540 The description for Event ID '540' in Source 'Security' cannot be found. The local computer may not have the necessary registry information or message DLL files to
display the message, or you may not have permission to access them. The following information is part of the event:
'MyAdminAccount', 'MyDomain', '(0x0, 0x145f)', '3', 'Data ONTAP', 'Extended Security', '-', '-', '-', '-', '-', '327936', '-', 'ServerIP', '0', '-'
4519 Aug 13 07:50 SuccessA... Security 538 The description for Event ID '538' in Source 'Security' cannot be found. The local computer may not have the necessary registry information or message DLL files to
display the message, or you may not have permission to access them. The following information is part of the event:
'MyAdminAccount', 'MyDomain', '(0x0, 0x145d)', '3'
4518 Aug 13 07:25 SuccessA... Security 540 The description for Event ID '540' in Source 'Security' cannot be found. The local computer may not have the necessary registry information or message DLL files to
display the message, or you may not have permission to access them. The following information is part of the event:
'MyAdminAccount', 'MyDomain', '(0x0, 0x145d)', '3', 'Data ONTAP', 'Extended Security', '-', '-', '-', '-', '-', '327936', '-', 'ServerIP', '0', '-'
The Message seems not to be in the right format...
With the Eventvwr.msc connected to my VFiler i can see the right Informations:
If i try to get the Information over "Get-NaSystemLog -AuditLog" there is no Output.
The informations over the Filer as you describe are not the informations that i need...
Any ideas?
Greetings
Matthias
