EMS 每日报告 auditlog.change.detected
适用于
- ONTAP 包含针对 CONTAP-352417 的修复
- AFF 系统
问题
- EMS 每日报告 auditlog.change.detected
Sat Oct 17 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
Sun Oct 18 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
Mon Oct 19 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
Tue Oct 20 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
Wed Oct 21 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
- MGWD 日志显示受影响的审计日志文件的签名验证失败。
Fri Oct 17 2026 00:05:00 [kern_mgwd:info:4036] 0x82bf8ea00: 86ffff0000000021: ERR: tables::audit: DigestVerifyFinal failed.Line:1673, Function:verifySign
Fri Oct 17 2026 00:05:00 [kern_mgwd:info:4036] 0x82bf8ea00: 86ffff0000000021: ERR: tables::audit: verify_hashes:src/tables/mhost_audit/audit.cc:1571Signatureverification failed for file: audit.log.0000000008