Network Attached Storage​

 View Only
  • 1.  HNAS Audit using Windows MMC tool

    Posted 08-25-2022 06:59
      |   view attached
    Hi,
    Audits are enabled on the Filesystems but when accessed on MMC it gives an error.

    How to open the evt file in MMC?

    ------------------------------
    Hassaan Pasha
    Systems Engineer
    Mideast Data Systems
    ------------------------------


  • 2.  RE: HNAS Audit using Windows MMC tool

    Posted 08-25-2022 09:22
    Unfortunately I do not think that we can come to a resolution for this w/o more details (I wish this were not so). May I please ask that you open up a case with our GSC for more detailed troubleshooting?

    ------------------------------
    Albert Hagopian
    Software Development Engineer - Specialist
    Hitachi Vantara
    ------------------------------



  • 3.  RE: HNAS Audit using Windows MMC tool

    Posted 04-27-2023 03:47
      |   view attached

    Hello,

    maybe a little late but i run also into this Problem. I think it isn't possible to directly open the audit file that way. You'll have to connect the computer management console to the HNAS IP or name you have audit enabled on. Then you find the information under event viewer.... as shown it the attached File



    ------------------------------
    Miran Kreuzer
    Service Administrator
    3 Banken IT GmbH
    ------------------------------



  • 4.  RE: HNAS Audit using Windows MMC tool

    Posted 04-27-2023 07:44

    Hi

    On the HNAS FS where you are experimenting with auditing

    Does the following HNAS CLI command give you any useful plain-text information

    audit-log-show  FSname

    ( where FSname is the name of the file-system which you have turned on auditing )

    -------------------------------------

    On the HNAS FS where you are experimenting with auditing, I'm guessing you are working with
    one test CIFS Share.  Did you configure the SACL of the directory tree under this test CIFS share ?
    You may need to do this to choose what sort of actions you want to audit for.

    -------------------------------------------

    IF   audit-log-show  FSname   does produce useful output,   you can easily automate data collection
    using the ssc tool on your workstation.

    Another automation option once you get the basics working may be to have the HNAS write
    the audit data to a syslog server.  The HNAS manual indicates that this is possible.

    ------------------------------------------

    Please keep the community informed ,  the results of your experimenting will be helpful

    Thanks
























    ------------------------------
    Andrew Romero
    Storage Administrator
    ------------------------------