Chat now with support
Chat with Support

Change Auditor for NetApp 7.2 - User Guide

File System events settings

From the Agent Configuration page on the Administration Tasks tab you can view and/or modify the File System settings for handling duplicate events.

Use the File System tab at the top of the Configuration Setup dialog to define how to process duplicate file system events.

Discard duplicates that occur within nn seconds
This option is selected by default and will discard file system events that occur within 10 seconds of each other. You can enter a value between 1 and 600 (or use the arrow controls) to increase or decrease this interval.
Audit all configured, including duplicates (Not Recommended)
Select this option to audit all configured file system events including duplicate events. This is NOT recommended and therefore is disabled by default.
 
To set the File System Events settings:
1
Open the Administration Tasks tab.
2
Click Configuration.
3
Select Agent in the Configuration task list to display the Agent Configuration page.
4
Click Configurations.
5
On the Configuration Setup dialog, select an agent configuration from the left-hand pane (for example, the configuration that is being used by the agents assigned to receive NetApp events).
6
Open the File System tab and set the File System Events settings as defined above.
7
Once you have set these settings, click OK to save your selections, close the dialog and return to the Agent Configuration page.
8
On the Agent Configuration page, select the Change Auditor agents assigned to the NetApp Auditing template (Auditing appears in the NetApp column) and click Refresh Configuration.

NetApp event logging

* 
NOTE: If you do not refresh the agent’s configuration, the agent will automatically check for a new agent configuration based on the polling interval setting (located on the System Settings tab of the Configuration Setup dialog). The default is every 15 minutes.

In addition to real-time event auditing, you can enable event logging to capture NetApp events locally in a Windows event log. This event log can then be collected using InTrust to satisfy long-term storage requirements.

Event logging is disabled by default. When enabled, only configured activities are sent to the ChangeAuditor for NetApp event log. See the Change Auditor for NetApp Event Reference Guide for a list of the events that can be sent to the event log.

To enable event logging:
1
Open the Administration Tasks tab.
2
Click Configuration.
3
Select Agent in the Configuration task list to display the Agent Configuration page.
4
Click Event Logging.
5
On the Event Logging dialog, select NetApp.
6
Click OK to save your selection and close the dialog.
 
The NetApp events configured in the NetApp Auditing template will then be sent to the ChangeAuditor for NetApp event log.

NetApp Searches/Reports

•
Introduction
•
Create custom NetApp searches

Introduction

You can create custom search definitions to search for file and/or folder changes to a specific NetApp file, folder or volume. You will use the Search Properties tabs across the bottom of the Searches page to define new custom searches.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating