ONTAP Discussions

Can CIFS Auditing know who delete or modify file?

AllenChang
36 Views

I create an audit using this command

vserver audit create -vserver fpsvm1 -destination /vol1/audit_log -events file-ops,cifs-logon-logoff -format evtx -rotate-size 100MB -rotate-limit 0

vserver audit enable -vserver fpsvm1

 

but when I try to modify and delete the file in share,

I can't see any record

Is the auditing full that I want?

0 REPLIES 0
Public