Hi
On the HNAS FS where you are experimenting with auditing
Does the following HNAS CLI command give you any useful plain-text information
audit-log-show FSname
( where FSname is the name of the file-system which you have turned on auditing )
-------------------------------------
On the HNAS FS where you are experimenting with auditing, I'm guessing you are working with
one test CIFS Share. Did you configure the SACL of the directory tree under this test CIFS share ?
You may need to do this to choose what sort of actions you want to audit for.
-------------------------------------------
IF audit-log-show FSname does produce useful output, you can easily automate data collection
using the ssc tool on your workstation.
Another automation option once you get the basics working may be to have the HNAS write
the audit data to a syslog server. The HNAS manual indicates that this is possible.
------------------------------------------
Please keep the community informed , the results of your experimenting will be helpful
Thanks
------------------------------
Andrew Romero
Storage Administrator
------------------------------
Original Message:
Sent: 04-27-2023 03:47
From: Miran Kreuzer
Subject: HNAS Audit using Windows MMC tool
Hello,
maybe a little late but i run also into this Problem. I think it isn't possible to directly open the audit file that way. You'll have to connect the computer management console to the HNAS IP or name you have audit enabled on. Then you find the information under event viewer.... as shown it the attached File
------------------------------
Miran Kreuzer
Service Administrator
3 Banken IT GmbH
Original Message:
Sent: 08-25-2022 06:59
From: Hassaan Pasha
Subject: HNAS Audit using Windows MMC tool
Hi,
Audits are enabled on the Filesystems but when accessed on MMC it gives an error.
How to open the evt file in MMC?
------------------------------
Hassaan Pasha
Systems Engineer
Mideast Data Systems
------------------------------