The NetApp Auditing page contains an expandable view of all the NetApp Auditing templates that have been previously defined. To add a new template to this list, use the Add tool bar button. Once added, the following information is provided for each template:
NOTE: Authorization to use the administration tasks on the Administrations Tasks tab is defined using the Application User Interface page under the Configuration task list. If you are denied access to the tasks on this page, refer to the Change Auditor User Guide for more information on how to gain access. |
1 |
• |
NetApp Filer - Select the NetApp filer from the drop-down or enter the NetBIOS name or IP address of the NetApp filer to be audited. |
• |
File and folder auditing is supported in cluster mode only. Select Detect filer mode...to determine which mode you have deployed. |
• |
Audit Path - Select File and enter a file name and path (<ShareName>\<Path>\<FileName>) to be audited or click the browse button to locate and select a file. Click Add to move the specified audit path to the selection list (middle of the page). |
• |
Events tab - Select the file events to be audited for the file selected in the selection list. |
NOTE: Selecting the File Events check box at the top of the events list on the Events tab will select all of the events listed. Similarly, clearing this check box will clear all of the selected events. |
3 |
On the second page of the wizard, select the agents to use to connect to the NetApp filer to capture the NetApp events.To add an agent to the NetApp Auditing template, click Add, select one or more agents from the list and click OK. |
4 |
5 |
On the Administration Tasks tab, click Configuration. Select Agent in the Configuration task list to open the Agent Configuration page. |
6 |
Select the agents assigned to the template (Auditing appears in the NetApp column) and click Refresh Configuration. |
1 |
• |
NetApp Filer - Select the NetApp CIFS server from the drop-down menu. If the NetApp CIFS server not appear in the list, enter the server’s NetBIOS name. |
• |
File and folder auditing is supported in cluster mode only. Select Detect filer mode to determine which mode you have deployed. |
• |
Audit Path - Select Folder and enter a folder name and path (<ShareName>\<FolderName>) to be audited or click the browse button to locate and select a folder. |
|
3 |
By default, the scope of coverage for the selected folder will be This object and all child objects. However, you can change the scope, by selecting a different option from the drop-down box in the scope cell of the selection list: |
• |
This object only - select this option to audit only the selected folder, not its files or subfolders. |
• |
This object and child objects only - select this option to audit the selected folder and its direct files and subfolders. This is not recursive. |
• |
This object and all child objects - select this option to audit this folder and all of its files and subfolders. |
NOTE: Selecting the File Events or Folder Events check box at the top of the events list on the Events tab will select all of the events listed. Similarly, clearing these check boxes will clear all of the selected events. |
• |
Add | Folder - use this option to exclude activity against files/subfolders in any folders that match the exclusion string. |
• |
Add | File - use this option to exclude activity against any files that match the exclusion string. |
7 |
Click Next. |
8 |
On the second page of the wizard, select the agents to be used to monitor the NetApp filer and click Add. On the Eligible Change Auditor Agents dialog, select one or more agents from the list and click OK. |
9 |
10 |
On the Administration Tasks tab, click Configuration. Select Agent in the Configuration task list to open the Agent Configuration page. |
11 |
Select the agents assigned to the template (Auditing appears in the NetApp column) and click Refresh Configuration. |
1 |
• |
NetApp Filer - Select the NetApp CIFS server from the drop-down menu. If the NetApp CIFS server not appear in the list, enter the server’s NetBIOS name. |
• |
File and folder auditing is supported in cluster mode only. Select Detect filer mode...to determine which mode you have deployed. |
• |
Audit Path - Select Volume. Enter a volume name (<VolumeName>) to be audited. Volume names can be determined by logging into the NetApp server and using the command: vol status. |
3 |
By default, the scope of coverage for the selected volume will be This object and all child objects, which cannot be changed. |
NOTE: Selecting the File Events or Folder Events check box at the top of the events list on the Events tab will select all of the events listed. Similarly, clearing these check boxes will clear all of the selected events. |
• |
Add | Folder - use this option to exclude activity against files/subfolders in any folders that match the exclusion string. |
• |
Add | File - use this option to exclude activity against any files that match the exclusion string. |
7 |
Click Next. |
8 |
On the second page of the wizard, click Add to select the agents to monitor the NetApp filer. On the Eligible Change Auditor Agents dialog, select one or more agents from the list and click OK. |
9 |
10 |
On the Administration Tasks tab, click Configuration. Select Agent in the Configuration task list to open the Agent Configuration page. |
11 |
Select the Change Auditor agents assigned to the template (Auditing appears in the NetApp column) and click Refresh Configuration. |
• |
Place your cursor in the Status cell for the template to be disabled, click the arrow control and select Disabled. |
2 |
To re-enable the auditing template, use the Enable option in either the Status cell or right-click menu. |
• |
Place your cursor in the Status cell for the audit path to be disabled, click the arrow control and select Disabled. |
2 |
To re-enable the auditing of an audit path, use the Enable option in either the Status cell or right-click menu. |
1 |
On the NetApp page, select the template to be deleted and click Delete | Delete Template. |
1 |
On the NetApp page, select the audit path to be deleted and click Delete | Delete File Path. |
1 |
On the NetApp Auditing page, select the agent to be deleted and click Delete | Delete Agent. |
The NetApp Auditing wizard is displayed when you click Add on the NetApp Auditing page. This wizard steps you through the process of creating a new NetApp auditing template, identifying the NetApp filer to audit, the auditing scope, and the agents to receive the events.
The following table provides a description of the fields and controls in the NetApp Auditing wizard:
File and folder auditing is supported in cluster mode only. Select Detect filer mode...to determine which mode you have deployed. | |||||||||
Select one of the following options to define auditing for a file, folder or volume:
Once you have entered the audit path to be audited, click Add to add it to the selection list. | |||||||||
Click the browse button to locate and select the file or folder to be audited. | |||||||||
Use Add to move the entry in the Audit Path text box to the selection list. NOTE: Even though you cannot edit the Audit Path when the All Volumes option is selected, you must still click Add to move it to the selection list. | |||||||||
Select an entry in the selection list and click Remove to remove it from the list. | |||||||||
When a Folder is selected, you can use the drop-down menu in the Scope field to change the scope of coverage.
| |||||||||
Use the Events tab to select vital file and/or folder events. | |||||||||
Select the file events to audit. Select the File Events check box to select all of the file events listed or select individual events from the list. | |||||||||
Select the folder events to audit. Select the Folder Events check box to select all of the folder events listed or select individual events from the list. | |||||||||
When the Folder, Volume or All Volumes option is selected in the Audit Path field and the Scope includes child objects, the Inclusions tab will be displayed allowing you to specify what in the selected audit path is to be audited. | |||||||||
Note: The slash (\) and double asterisk (**) characters can only be used with volumes. For example, entering * will include all folders and files in the selected audit path. See File and Folder Inclusion and Exclusion Examples for more file mask examples. Once you have specified the subfolders and files to be included, select Add to add it to the Inclusions list. | |||||||||
| |||||||||
When the Folder, Volume or All Volumes option is selected in the Audit Path field and the Scope includes child objects, the Exclusions tab will be displayed allowing you to refine the settings defined on the Inclusions tab. That is, you can optionally specify the names and paths of any subfolders and files in the selected audit path that are to be excluded from auditing. | |||||||||
Add the names and paths of subfolders and files to exclude from auditing |
For example, entering *.log will exclude all files in the audit folder with the .log file extension. Whereas, entering **.log will exclude all files with the .log file extension found in the audit folder or in any subfolders. See File and Folder Inclusion and Exclusion Examples for more examples. You can also enter the name of an individual subfolder or file that is to be excluded from auditing. Once you have specified a subfolder or file to be excluded, select the appropriate Add button to add the file or folder to the Exclusions list. | ||||||||
| |||||||||
Use Add to assign one or more agents to the NetApp Auditing template. | |||||||||
Use Remove to remove the selected agent from the list. | |||||||||
If you did not add the agent accounts to the local Administrators group on the NetApp filer, select the agent from the list and click Set Credentials. Enter the NetApp filer credentials to be used. | |||||||||
Use Clear Credentials to clear the NetApp filer credentials that were previously entered for the selected agent. | |||||||||
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center