ONTAP Discussions

7MODE - CIFS audit Netapp - User Sessions

MiguelTRX
2,025 Views

Hi everyone! 

 

I was wondering if there is any way in Netapp 7mode to see throught the cifs auditing ,the domain user history access for the NAS. 

 

Regards!  

 

 

1 ACCEPTED SOLUTION

cedric_renauld
1,944 Views

Hi,

The informations was in .EVT file, you can read them by your Windows Event viwer

But you need copy files on your computer and read them after

Have you access to this page :

https://kb.netapp.com/onprem/ontap/da/NAS/7-mode_How_to_set_up_CIFS_auditing_on_the_controller

 

View solution in original post

3 REPLIES 3

cedric_renauld
1,994 Views

Hello,

You need to enable the CIFS auditing, by options cifs. ... somewath

And the better way is to send this event to a log server, or you can read them in a file on the /etc if i remember well

MiguelTRX
1,984 Views

Hi.

 

Yeah well. The options cifs it running already and audit its being saved. 

 

MiguelTRX_0-1689773001705.png

 

Cant use log server as this a quite isolated storage system. So the question now is ... wich is the file in /etc/log that provides with that information??? How can it be opened? 

 

Thanks in advance! 

 

cedric_renauld
1,945 Views

Hi,

The informations was in .EVT file, you can read them by your Windows Event viwer

But you need copy files on your computer and read them after

Have you access to this page :

https://kb.netapp.com/onprem/ontap/da/NAS/7-mode_How_to_set_up_CIFS_auditing_on_the_controller

 

Public