UNSOLVED
Ability to view Protocol Audit Logs
Looking to see how many users are accessing the network drives stored on our Isilon nodes. Better yet, see how many users access each individual drive in a day or week span. We have "Protocol Access Auditing" enabled and our zone is being forwarded to a CEE server. I go to that server and not finding where to see protocol access logs. I found one log file I believe to contain this data but it's locked. \\SERVERNAME\c$\Collector Working Share\VaronisWorkDirectoryCollector\WorkSpace\RTA_LevelDB\2024-12-04-21-10-12\000003.log. This is 1.8MB.
Dell-SapanaPrabhu
Moderator
•
5 Posts
•
2 Points
0
0
Posted December 11th, 2024 05:39
Hi,
Additionally I would like to add few details when using audit viewer:
when running audit viewer please check the list of possible powerscale values that can be seen in the raw outputs of isi_audit results with reference link:
https://www.dell.com/support/kbdoc/en-us/000019850/isilon-audit-payload-values
Let us know if you have any additional questions.(edited)
Thanks,
Sapana Prabhu
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!
#Iwork4Dell
DELL-Josh Cr
Community Manager
•
9763 Posts
•
44886 Points
0
0
Posted December 6th, 2024 13:32
Hi,
Thanks for your question.
Try using the isi_audit_viewer command. https://dell.to/4f2WzCb
Let us know if you have any additional questions.