Change Auditor for NetApp 7.1.1

Chatta subito con l'assistenza

Ottieni assistenza in tempo reale
Completa la registrazione

Accedi

Richiedi prezzo

Contatta il supporto vendite

Introduction System overview Deployment requirements FPolicy limitation Client components and features

Introduction Verify auditing template is applied Make changes and run a report Troubleshooting steps

Introduction NetApp Auditing page NetApp Auditing templates NetApp Auditing wizard File System events settings NetApp event logging

NetApp Searches/Reports

Introduction Create custom NetApp searches

Performance Considerations

Change Auditor agent performance Configuring audit scope

NetApp Filer Events File and Folder Inclusion and Exclusion Examples

Inclusions tab Exclusions tab

Folder exclusion examples Volume exclusion examples All volume exclusion examples

Verify auditing template is applied


	NOTE: NetApp filer auditing is only available if you have licensed Change Auditor for NetApp. If you do not have a valid license you can use the features, however, associated events are not captured. To verify that it is licensed, right-click the coordinator icon in the system tray and select Licensing.

To ensure NetApp events are being captured, check to see if the agent assigned to the NetApp Auditing template is using the latest agent configuration.

To verify that latest agent configuration is being used:

Select Start | All Programs | Quest | Change Auditor | Change Auditor Client.

Open the Administration Tasks tab (View | Administration menu command).

If not already selected, click Configuration.

Select Agent in the Configuration task list to open the Agent Configuration page.

Select the Change Auditor agent assigned to the NetApp auditing template (Auditing appears in the NetApp column) and click Refresh Configuration.

Make changes and run a report

To test NetApp filer auditing, make some changes to the NetApp filer being monitored.

For example:

•

create a new folder

•

rename the folder

•

add a test .docx or .txt file

•

rename the file

•

move the file

•

change the security permissions on a file (right-click file, open the Security tab and add another user with full control)

•

delete the test .txt file

•

add a sub-folder

•

change the security permission of the new folder

Select Start | All Programs | Quest | Change Auditor | Change Auditor Client to review the events generated.

Open the Searches tab.

Expand the Shared | Built-in | All Events folder in the left pane.

Locate and double-click All NetApp Events in the right pane.

A new Search Results tab is added to the client displaying the NetApp events that were captured.

Double-click an event from the Search Results grid to display the event details for the selected event.

Troubleshooting steps

If the NetApp events do not appear as expected, check the following:

•

Verify that the NetApp filer is valid for the NetApp Auditing template. The NetApp Filer field should contain the NetBIOS name or IP address of the NetApp filer to be audited. The wizard does not validate this entry when it is entered.

•

Verify that the agents assigned to the NetApp auditing template are not on the servers that are initiating file changes to the NetApp filer. (This is a limitation with the NetApp filer’s FPolicy.)

•

Verify that the following options have been configured on the servers hosting the agents assigned to a NetApp Auditing template:

•

Reverse DNS zone must be configured and functional in your domain.

•

If Windows Firewall is enabled, it must be configured to allow ‘File Sharing’.

See the Release Notes for required rights and permission.

•

Verify that all of the agents assigned to a NetApp Auditing template have their user account in the local Administrators group of the NetApp filer or that you have specified the NetApp filer credentials in the NetApp Auditing wizard. See the Release Notes for required rights and permission.

•