Change Auditor for NetApp 7.4

Chat now with support

Verify auditing template is applied


	NOTE: NetApp filer auditing is only available if you have licensed Change Auditor for NetApp. If you do not have a valid license you can use the features, however, associated events are not captured. To verify that it is licensed, right-click the coordinator icon in the system tray and select Licensing.

To ensure NetApp events are being captured, check to see if the agent assigned to the NetApp Auditing template is using the latest agent configuration.

To verify that latest agent configuration is being used:

Select Start | All Programs | Quest | Change Auditor | Change Auditor Client.

Open the Administration Tasks tab (View | Administration menu command).

If not already selected, click Configuration.

Select Agent in the Configuration task list to open the Agent Configuration page.

Select the Change Auditor agent assigned to the NetApp auditing template (Auditing appears in the NetApp column) and click Refresh Configuration.

Make changes and run a report

To test NetApp filer auditing, make some changes to the NetApp filer being monitored.

For example:

•

create a new folder

•

rename the folder

•

add a test .docx or .txt file

•

rename the file

•

move the file

•

change the security permissions on a file (right-click file, open the Security tab and add another user with full control)

•

delete the test .txt file

•

add a sub-folder

•

change the security permission of the new folder

Select Start | All Programs | Quest | Change Auditor | Change Auditor Client to review the events generated.

Open the Searches tab.

Expand the Shared | Built-in | All Events folder in the left pane.

Locate and double-click All NetApp Events in the right pane.

A new Search Results tab is added to the client displaying the NetApp events that were captured.

Double-click an event from the Search Results grid to display the event details for the selected event.

Troubleshooting steps

If the NetApp events do not appear as expected, check the following:

•

Verify that the NetApp filer is valid for the NetApp Auditing template. The NetApp Filer field should contain the NetBIOS name or IP address of the NetApp filer to be audited. The wizard does not validate this entry when it is entered.

•

Verify that the agents assigned to the NetApp auditing template are not on the servers that are initiating file changes to the NetApp filer. (This is a limitation with the NetApp filer’s FPolicy.)

•

Verify that the following options have been configured on the servers hosting the agents assigned to a NetApp Auditing template:

•

Reverse DNS zone must be configured and functional in your domain.

•

If Windows Firewall is enabled, it must be configured to allow ‘File Sharing’.

See the Release Notes for required rights and permission.

•

Verify that all of the agents assigned to a NetApp Auditing template have their user account in the local Administrators group of the NetApp filer or that you have specified the NetApp filer credentials in the NetApp Auditing wizard. See the Release Notes for required rights and permission.

•