Unsolved
1 Rookie
•
1 Message
0
118
December 5th, 2024 15:49
Ability to view Protocol Audit Logs
Looking to see how many users are accessing the network drives stored on our Isilon nodes. Better yet, see how many users access each individual drive in a day or week span. We have "Protocol Access Auditing" enabled and our zone is being forwarded to a CEE server. I go to that server and not finding where to see protocol access logs. I found one log file I believe to contain this data but it's locked. \\SERVERNAME\c$\Collector Working Share\VaronisWorkDirectoryCollector\WorkSpace\RTA_LevelDB\2024-12-04-21-10-12\000003.log. This is 1.8MB.
No Events found!
DELL-Josh Cr
Moderator
•
9.2K Posts
0
December 6th, 2024 13:32
Hi,
Thanks for your question.
Try using the isi_audit_viewer command. https://dell.to/4f2WzCb
Let us know if you have any additional questions.
Dell-SapanaPrabhu
Moderator
•
4 Posts
0
December 11th, 2024 05:39
Hi,
Additionally I would like to add few details when using audit viewer:
when running audit viewer please check the list of possible powerscale values that can be seen in the raw outputs of isi_audit results with reference link:
https://www.dell.com/support/kbdoc/en-us/000019850/isilon-audit-payload-values
Let us know if you have any additional questions.
(edited)
Phil.Lam
3 Apprentice
•
608 Posts
0
January 2nd, 2025 22:14
@JRO12, insiightiq (iiq) would be a better fit to see historical data on clients.