An audit log is a record of commands executed at the console, through a Telnet shell, an SSH shell, or by using the rsh command. The audit log data is logged in the /etc/log directory in a file called auditlog. Administrative HTTP operations, such as those resulting from the use of FilerView, are also logged. The maximum size of the auditlog file is specified by the auditlog.max_file_size option. By default, Data ONTAP is configured to save an audit log.
Note
You can also configure auditing specific to your file access protocol. For more information, see the File Access and Protocols Management Guide.
You can access the auditlog files using your NFS or CIFS client, or using HTTP. For more information, see Accessing the default directories on the storage system.
Every Saturday at midnight, the /etc/log/auditlog file is copied to /etc/log/auditlog.0, /etc/log/auditlog.0 is copied to /etc/log/auditlog.1, and so on. This also occurs if the auditlog file reaches the maximum size specified by auditlog.max_file_size.
The system saves auditlog files for six weeks, unless any auditlog file reaches the maximum size, in which case the oldest auditlog file is discarded.
To configure audit logging, complete the following steps.
Copyright © 1994-2005, Network Appliance, Inc. All rights
reserved.
Part No. 210-01077_B0
File: 7maint8.htm
Last updated: 21-Dec-2005 09:03:29