Change Auditor 7.5 - User Guide

Client components and features

Client components and features

The following table lists the client components and features that require a valid Change Auditor for NetApp license. The product will not prevent you from using these features; however, associated events will not be captured unless the proper license is applied.

NOTE: To hide unlicensed Change Auditor features from the Administration Tasks tab (including unavailable audit events throughout the client), use the Action | Hide Unlicensed Components menu command. Note this command is only available when the Administration Tasks tab is the active page.

 

Table 1. Change Auditor for NetApp client components/features

Client page	Feature
Administration Tasks tab	Agent Configuration page • Event Logging - enable/disable NetApp event logging • Configuration Setup dialog - File System tab ▪ Discard duplicates that occur within nn seconds ▪ Audit all configured, including duplicates (Not Recommended) Audit Task list • NetApp NOTE: See NetApp Filer Auditing for information on enabling event logging, viewing/modifying the agent configuration settings, and creating templates to define NetApp auditing.
Event Details pane	What details • Path • Process
Events	Facilities • NetApp
Searches page	Built-in reports • Reports that include NetApp events.

 

Getting Started

Getting Started

•	Introduction

•	Verify auditing template is applied

•	Make changes and run a report

•	Troubleshooting steps

Introduction

Introduction

You can search, report and alert on changes to a specific file, folder, volume or all volumes on a NetApp filer and receive real-time alerts whenever someone tries to access a secure file or folder on a NetApp device.

Verify auditing template is applied

Verify auditing template is applied

NOTE: NetApp filer auditing is only available if you have licensed Change Auditor for NetApp. If you do not have a valid license you can use the features, however, associated events are not captured. To verify that it is licensed, right-click the coordinator icon in the system tray and select Licensing.

To ensure NetApp events are being captured, check to see if the agent assigned to the NetApp Auditing template is using the latest agent configuration.

To verify that latest agent configuration is being used:

1	Select Start | All Programs | Quest | Change Auditor | Change Auditor Client.

2	Open the Administration Tasks tab (View | Administration menu command).

3	If not already selected, click Configuration.

4	Select Agent in the Configuration task list to open the Agent Configuration page.

5	Select the Change Auditor agent assigned to the NetApp auditing template (Auditing appears in the NetApp column) and click Refresh Configuration.