Configuring Data ONTAP for CIFS auditing

About configuring Data ONTAP for CIFS auditing

When you configure Data ONTAP for CIFS auditing, all options that are set and the event log file persist across a reboot or if CIFS is terminated or restarted.

Enabling and disabling CIFS auditing

To enable or disable CIFS auditing on the filer, complete the following step.

Step	Action
1	Enter the following command: options cifs.audit.enable on \| off Use `on` to enable CIFS auditing or `off` to disable auditing. Note CIFS auditing is disabled by default.

Enabling and disabling auditing of file access events

To turn auditing on or off specifically for file access events, complete the following step.

Step	Action
1	Enter the following command: options cifs.audit.file_access_events.enable on \| off Note Auditing of file access events is turned on by default. If you want this option turned on, the `cifs.audit.enable` option must also be turned on.

Enabling and disabling auditing of logon and logoff events

To turn auditing on or off specifically for logon and logoff events, complete the following step.

Step	Action
1	Enter the following command: options cifs.audit.logon_events.enable on \| off Note Auditing of logon and logoff events is turned on by default. If you want this option turned on, the `cifs.audit.enable` option must also be turned on.