7MODE - CIFS audit Netapp - User Sessions

[MiguelTRX]

Hi everyone! 

I was wondering if there is any way in Netapp 7mode to see throught the cifs auditing ,the domain user history access for the NAS. 

Regards!  

[cedric_renauld]

Hello,

You need to enable the CIFS auditing, by options cifs. ... somewath

And the better way is to send this event to a log server, or you can read them in a file on the /etc if i remember well

[MiguelTRX]

Hi.

Yeah well. The options cifs it running already and audit its being saved. 

Cant use log server as this a quite isolated storage system. So the question now is ... wich is the file in /etc/log that provides with that information??? How can it be opened? 

Thanks in advance! 

[cedric_renauld · Accepted solution]

Hi,

The informations was in .EVT file, you can read them by your Windows Event viwer

But you need copy files on your computer and read them after

Have you access to this page :

https://kb.netapp.com/onprem/ontap/da/NAS/7-mode_How_to_set_up_CIFS_auditing_on_the_controller