NetApp
Configuration : Protocols > CIFS : Understanding CIFS : What an event log is

What an event log is
You can use the event log to see the file access information gathered by CIFS auditing. The log is in Windows NT format and can be viewed by the Event Viewer.
By default, the event log is /etc/log/adtlog.evt. You can specify another file as the event log and an alternative maximum file size.
You cannot update the event log when it is being viewed by a client. To prevent losing event information that is gathered when the event log is open, System Manager does not write to the event log as event information is being collected. Instead, it updates the event log when you manually save the log from System Manager.


Was this topic helpful? Send comments to NetApp.