Chat now with support
Chat with Support

Change Auditor for NetApp 7.2 - User Guide

Verify auditing template is applied

* 
NOTE: NetApp filer auditing is only available if you have licensed Change Auditor for NetApp. If you do not have a valid license you can use the features, however, associated events are not captured. To verify that it is licensed, right-click the coordinator icon in the system tray and select Licensing.

To ensure NetApp events are being captured, check to see if the agent assigned to the NetApp Auditing template is using the latest agent configuration.

To verify that latest agent configuration is being used:
1
Select Start | All Programs | Quest | Change Auditor | Change Auditor Client.
2
Open the Administration Tasks tab (View | Administration menu command).
3
If not already selected, click Configuration.
4
Select Agent in the Configuration task list to open the Agent Configuration page.
5
Select the Change Auditor agent assigned to the NetApp auditing template (Auditing appears in the NetApp column) and click Refresh Configuration.

Make changes and run a report

1
To test NetApp filer auditing, make some changes to the NetApp filer being monitored.
For example:
•
create a new folder
•
rename the folder
•
add a test .docx or .txt file
•
rename the file
•
move the file
•
change the security permissions on a file (right-click file, open the Security tab and add another user with full control)
•
delete the test .txt file
•
add a sub-folder
•
change the security permission of the new folder
2
Select Start | All Programs | Quest | Change Auditor | Change Auditor Client to review the events generated.
3
Open the Searches tab.
4
Expand the Shared | Built-in | All Events folder in the left pane.
5
Locate and double-click All NetApp Events in the right pane.
A new Search Results tab is added to the client displaying the NetApp events that were captured.
6
Double-click an event from the Search Results grid to display the event details for the selected event.

Troubleshooting steps

If the NetApp events do not appear as expected, check the following:

•
Verify that the NetApp filer is valid for the NetApp Auditing template. The NetApp Filer field should contain the NetBIOS name or IP address of the NetApp filer to be audited. The wizard does not validate this entry when it is entered.
•
Verify that the agents assigned to the NetApp auditing template are not on the servers that are initiating file changes to the NetApp filer. (This is a limitation with the NetApp filer’s FPolicy.)
•
Verify that the following options have been configured on the servers hosting the agents assigned to a NetApp Auditing template:
•
Reverse DNS zone must be configured and functional in your domain.
•
If Windows Firewall is enabled, it must be configured to allow ‘File Sharing’.
See the Release Notes for required rights and permission.
•
Verify that all of the agents assigned to a NetApp Auditing template have their user account in the local Administrators group of the NetApp filer or that you have specified the NetApp filer credentials in the NetApp Auditing wizard. See the Release Notes for required rights and permission.
•
Verify that you have selected those types of events in the NetApp Auditing template. (Events tab in the wizard.)
•
Verify that you have included the correct subfolders and paths in the NetApp Auditing template. (Inclusions tab in the wizard.)
* 
NOTE: Entering * will include all subfolders and paths.
•
Verify that you have not excluded the specified subfolders or paths in the NetApp Auditing template. (Exclusions tab in the wizard.)
•
Refresh the specified agent configurations on the Agent Configuration page to ensure the latest NetApp Auditing template is being used.
•
Verify what version of Data ONTAP is being used. That is, NetApp filers running version 7.2 (or earlier) will NOT capture the File/Folder Ownership Changed or File/Folder Access Rights Changed events.
•
If you are using an older version of Data ONTAP, you may need to upgrade to version 7.3.4 (or later) in order to capture events.

 

NetApp Filer Auditing

•
Introduction
•
NetApp Auditing page
•
NetApp Auditing templates
•
NetApp Auditing wizard
•
File System events settings
•
NetApp event logging
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating