Enabling auditing for a file system

File Service Administration Guide for Hitachi NAS Platform
Version
14.9.x
Audience
anonymous
Part Number
MK-92HNAS006-31
File system auditing can be enabled on a per-file system basis.
Note: By default, when file system auditing is enabled, access to the file system is limited to the SMB and NFSv3 protocols. Access by clients using other protocols, like iSCSI, can, however, be allowed. When such access is allowed, access to file system objects through these protocols is not audited.

To enable file system auditing for a particular file system, the file system must be added to the file system audit list.

  1. Navigate to Home > File Services > File System Audit Policies.


    Field/Item Description
    EVS Lists the EVS to which host the file system is assigned. Click change to go to the Select an EVS page, where you can select a different EVS.
    Audit Log Consolidated Cache The server uses this cache for reporting file system audit events to Windows clients. Only one consolidated cache file can be configured per EVS.
    modify Enables the user to configure a file system, directory where the file is stored and file name for the audit log consolidated cache file.
    File System Lists all file systems in the specified EVS that have an audit policy.
    Status Indicates whether file system auditing is enabled or disabled. It also indicates whether auditing is external.
    details Displays the File System Audit Policy Details page, in which you can change the auditing options for a file system.
    add Displays the Add File System Audit Policy page, in which you can set the auditing options for a file system. Only one audit policy is allowed per file system.
    delete Deletes the audit policy for a selected file system.
    enable Enables file system auditing for the selected file system.
    disable Disables file system auditing for the selected file system.
  2. If the file system on which you want to enable auditing is listed, an audit policy has already been defined for that file system.
    • If the Audit Policy Status is enabled, logging is already enabled for the file system, and no further actions are required.
    • If the Audit Policy Status is disabled, select the check box next to the file system name, and click enable.
    If the file system on which you want to enable auditing is not displayed, a file system audit policy may not have been defined for that file system, or the file system may have an audit policy defined, but the file system is not in the currently selected EVS.
  3. Click change to display the Select an EVS page, in which you can select a different EVS.
    • If, after selecting the EVS that hosts the file system, the file system on which you want to enable auditing is now listed on the File System Audit Policies page, select the check box next to the file system name, and click enable.
    • If, after selecting the EVS that hosts the file system, the file system on which you want to enable auditing is still not displayed, you must define a file system audit policy for that file system. Click add to display the Add File System Audit Policy page, in which you can set the auditing options for a file system.