Yes - via CIFS (Windows) auditing

See the CIFS manual

Hi,

Please check the knowledge base solution : emc69251  .
And also document Using Windows Administrative Tools with Celerra in powerlink .

Thanks
Vanitha

You probably mean configuring audit by GPO?

Which one has to be configured for monitoring file or directory acitvities? (is "Audit object access" sufficient)

Thx

No not GPO

Enable auditing on the DM, expand and relocate the audit logs, configure audit ACLs and monitor via security.evt

Is there a way to trigger an SNMP trap or e-mail based on a defined event in the audit log ?

Which audit log ?

I think it would be the audit evt log. Ideally I think we would want to

1. activate the audit log for a CIFS share or shares.
2. setup some sort of nas_event to trigger a trap
3. Set the audit log to auto rotate.

No

CIFS auditing is CIFS specific - it's "events" don't reach the control station where nas_event is processed.

It is designed to be Windows compatible and to be used with Windows tools remotely

Please see the Monitoring manual on which events are possible

Hmmm

Anyone know of a Microsoft native or 3rd party tool to collect and trigger on Windows events on remote servers ?