ONTAP Discussions

Problem auditing ~snapshot

sbennett1298
1,458 Views

Hello,

 

  I want to use auditing to detect if anyone has accessed /~snapshot. We are using cluster mode 8.x.

When testing this my results are eratic. Sometimes accessing a prevous version of a file is captured in the audit log but usually not.

Any ideas?

 

-sbennett1298

1 REPLY 1

Jeff_Yao
1,353 Views

there's command "volume snapshot event-config modify" on 8.3. but enabling this might cause excessive logging into /mroot.

Public