Network and Storage Protocols

Windows file acess auditing with CIFS protocal

AllenChang
619 Views

I want to see the cifs file access auditing log by using windows audit function,

so I enable file "Audit Object Access" in "Default Domain Gorup Policy"

AllenChang_0-1722298597168.png

and I config the file access auditing for the cifs sharing of my svm

AllenChang_1-1722298648995.png

But the question is

Where I can see the auditing log in windows?

Thanks

1 REPLY 1

ChLokesh
552 Views

The audit share contains the active audit.log file and any compressed audit log files. For easy access to audit logs, you can configure client access to audit shares for both NFS and CIFS (CIFS is deprecated). You can also access audit log files directly from the command line of the Admin Node.

https://docs.netapp.com/us-en/storagegrid-116/audit/accessing-audit-log-file.html

 

Here is how to configure NAS auditing: https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/How_to_set_up_NAS_auditing_in_ONTAP_9 

Public