跳转到主内容

CIFS 审核策略不持久,某些事件设置丢失 一天后

Views:
38
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
cifs
Last Updated:

适用于

  • ONTAP 9
  • CIFS 审核
  • CIFS

问题

CIFS 审核策略不会持久,某些事件设置会在一天之后丢失。

示例

  • 按如下所示修改事件设置:

::> vserver audit modify -vserver <svm> -events file-ops,file-share,user-account,authorization-policy-change,security-group,cifs-logon-logoff,cap-staging 

::> vserver audit show              
Vserver    State  Event Types     Log Format Target Directory
----------- ------ ------------------ ---------- ----------------------------
 <svm>   true   file-ops,      evtx     /vol1/audit
          file-share,
          user-account,
          authorization-
          policy-change,
          security-group,
          cifs-logon-logoff,
          cap-staging,
          audit-policy-
          change

  • 在第二天显示审核事件时,某些设置将消失

::> vserver audit show              
Vserver    State  Event Types     Log Format Target Directory
----------- ------ ------------------ ---------- ----------------------------
<svm>     true  user-account         evtx     /vol1/audit
          authorization-
          policy-change,
          security-group,
          audit-policy-
          change

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.