Finding Files Modified in a Volume between Two Specified Dates

[csehuji]

We are running Ontap 9.11.1P1 and have enabled File Analytics on a particular volume.

We want to be able to get a list of files/directories in that volume that have been modified between date X and date Y.

We couldn't find a way to do so using the File Analytics' Explorer.

Thanks in advance.

[aladd]

Is the file system analytics explorer failing or just not displaying the data you wish?

if the latter, I might suggest OnCommand Insight which has a rather granular reporting system from my understanding. although it may be something we can suggest as an RFE.

[csehuji]

Hello.

Thank you for your response.

Explorer is functioning (9.11.1P1 on a FAS8300), but not displaying the
data we want for the following reasons:

1. It sorts by access time and not modification time.
2. One can only specify X weeks/months before now, not two end dates.
3. The GUI representation is not comfortable to work with if we want to
feed the results to a script. We need a list of files via a CLI command.

I tried downloading OnCommand Insight from the "now" site and got:

Unauthorized Access!
If you would like to purchase, please contact NetApp
<>

Regards,
Ephraim

[aladd]

OnCommand Insight is a licensed tool through NetApp, although I do know it provides a lot more granularity for reporting. That might be something to discuss with the account team, in the meantime I will see if we can put in an RFE for the file analytics in explorer.

[ttran]

Hello @csehuji ,

File Analytics Explorer by default displays Access Time; you can change the view to display Modified Time by changing the following flag "-atime-update" to "false" via the "volume modify" command in the CLI.

Here are some reference documents:

File System Analytics - View file system activity 

CLI: Volume Modify 

Regards,

Team NetApp

[csehuji]

Thank you for your reply.

However, reading the documentation you pointed me to, I see:

*[-atime-update {true|false}] - Access Time Update Enabled*

*This optionally specifies whether the access time on inodes is updated
when a file is read. The default setting is true .*

That means if I set it to false, then the inodes will not be updated upon
file access. True. now Explorer will show modification time, but I will be
losing value information if I want to know access time.

Furthermore, the view of files is still only by the Explorer GUI with no
way to extract the information by CLI.

Sincerely,
Ephraim