Change Auditor for NetApp queries NetApp filers for modifications made to files and folders. This auditing functionality is based on NetApp’s Data ONTAP file screening policy (FPolicy), which allows third-party screening software to interact with the NetApp filer. This section lists the audited events captured by Change Auditor when Change Auditor for NetApp is licensed and a NetApp auditing template is created for each NetApp filer to be audited. These events are listed in alphabetical order by facility.
See Notes and Performance Considerations for strategies to help minimize performance issues.
When event logging for NetApp is enabled in Change Auditor, NetApp filer events will also be written to a Windows event log, named ChangeAuditor for NetApp. This event log can then be gathered by InTrust and Quest Knowledge Portal for further processing and reporting.
NOTE: To enable event logging, select Event Logging on on the Agent Configuration page (Administration Tasks tab), and select the type of event logging to enable. |
The following table lists the log events captured when NetApp event logging is enabled. They are listed in numeric order by event ID.
This section contains a numerical list of notes for Change Auditor for NetApp events.
ONTAP 7.3 (or later) is required to monitor permission change events.
• |
Moving a parent folder: For a ‘Move’ operation, only one event will be generated for the parent folder because action is only on the parent folder’s path, none of the child folders or files are physically moved. |
• |
Deleting a parent folder: For a ‘Delete’ operation, an event will be generated for each folder or file because each object will be removed separately. |
• |
Copying a parent folder: For a ‘Copy’ operation, an event will be generated for each folder and file because a new object will be created within the target folder. |
If a NetApp filer is not available, the agent will retry the connection every 10 minutes.
© ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center