跳转到主内容

CIFS 审核策略不持久,某些事件设置丢失 一天后

Views:
26
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
cifs
Last Updated:

适用于

  • ONTAP 9
  • CIFS 审核
  • CIFS

问题

CIFS 审核策略不会持久,某些事件设置会在一天之后丢失。

示例

  • 按如下所示修改事件设置:

::> vserver audit modify -vserver <svm> -events file-ops,file-share,user-account,authorization-policy-change,security-group,cifs-logon-logoff,cap-staging 

::> vserver audit show              
Vserver    State  Event Types     Log Format Target Directory
----------- ------ ------------------ ---------- ----------------------------
 <svm>   true   file-ops,      evtx     /vol1/audit
          file-share,
          user-account,
          authorization-
          policy-change,
          security-group,
          cifs-logon-logoff,
          cap-staging,
          audit-policy-
          change

  • 在第二天显示审核事件时,某些设置将消失

::> vserver audit show              
Vserver    State  Event Types     Log Format Target Directory
----------- ------ ------------------ ---------- ----------------------------
<svm>     true  user-account         evtx     /vol1/audit
          authorization-
          policy-change,
          security-group,
          audit-policy-
          change

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

Scan to view the article on your device