ONTAP 9.12.1 commands

50←PDF
  • ONTAP 9.12.1 commands(CA08871-263en.pdf)
  • vserver audit show

    Display the audit configuration

    Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

    Description

    The vserver audit show command displays audit configuration information about Vservers. The command output depends on the parameter or parameters specified with the command. If you do not specify any parameters, the command displays the following information about all the Vservers:

    • Vserver name

    • Audit state

    • Target directory

    You can specify the -fields parameter to specify which audit configuration information to display about Vservers. + You can specify additional parameters to display only information that matches those parameters. For instance, to display information about the log file rotation size of a Vserver whose value matches 10 MB, run the command with the -rotate-size 10MB parameter.

    You can specify the -instance parameter to display audit configuration information for all Vservers in list form.

    Parameters

    { [-fields <fieldname>,…​]

    If you specify the -fields <fieldname>, …​ parameter, the command only displays the fields that you specify.

    | [-log-save-details ]

    You can specify the -log-save-details parameter to display the following information about all the Vservers:

    • Vserver name

    • Rotation file size

    • Rotation schedules

    • Rotation limit

    | [-instance ] }

    If you specify the -instance parameter, the command displays detailed information about all entries.

    [-vserver <vserver name>] - Vserver

    If you specify this parameter, the command displays information about the specified Vserver.

    [-state {true|false}] - Auditing State

    If you specify this parameter, the command displays information about the Vservers that use the specified audit state value.

    [-destination <text>] - Log Destination Path

    If you specify this parameter, the command displays information about the Vservers that use the specified destination path.

    [-events {file-ops|cifs-logon-logoff|cap-staging|file-share|audit-policy-change|user-account|authorization-policy-change|security-group|async-delete}] - Categories of Events to Audit

    If you specify this parameter, the command displays information about the Vservers that use the specified category of events that are audited. Valid values are file-ops , cifs-logon-logoff , cap-staging , file-share , audit-policy-change , user-account , security-group and authorization-policy-change . audit-policy-change will appear only in diag mode.

    [-format {xml|evtx}] - Log Format

    If you specify this parameter, the command displays information about the Vservers that use the specified log format.

    [-rotate-size {<size>|-}] - Log File Size Limit

    If you specify this parameter, the command displays information about the Vservers that use the specified log file rotation size.

    [-rotate-schedule-month <cron_month>,…​] - Log Rotation Schedule: Month

    If you specify this parameter, the command displays information about the Vservers that use the specified month of the time-based log rotation scheme. Valid values are January, February, March, April, May, June, July, August, September, October, November, and December.

    [-rotate-schedule-dayofweek <cron_dayofweek>,…​] - Log Rotation Schedule: Day of Week

    If you specify this parameter, the command displays information about the Vservers that use the specified day of the week of the time-based log rotation scheme. Valid values are Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, and Saturday.

    [-rotate-schedule-day <cron_dayofmonth>,…​] - Log Rotation Schedule: Day

    If you specify this parameter, the command displays information about the Vservers that use the specified day of the month of the time-based log rotation scheme. Valid values range from 1 to 31.

    [-rotate-schedule-hour <cron_hour>,…​] - Log Rotation Schedule: Hour

    If you specify this parameter, the command displays information about the Vservers that use the specified hour of the time-based log rotation scheme. Valid values range from 0 (midnight) to 23 (11:00 p.m.).

    [-rotate-schedule-minute <cron_minute>,…​] - Log Rotation Schedule: Minute

    If you specify this parameter, the command displays information about the Vservers that use the specified minute of the time-based log rotation scheme. Valid values range from 0 to 59.

    [-rotate-schedule-description <text>] - Rotation Schedules

    If you specify this parameter, the command displays information about the Vservers that use the specified rotation schedules. This field is derived from the rotate-time fields.

    [-rotate-limit <integer>] - Log Files Rotation Limit

    If you specify this parameter, the command displays information about the Vservers that use the specified rotation limit value.

    [-retention-duration <[<integer>d][<integer>h][<integer>m][<integer>s]>] - Log Retention Duration

    If you specify this parameter, the command displays information about the Vservers audit logs retention duration.

    [-audit-guarantee {true|false}] - Strict Guarantee of Auditing

    If you specify this parameter, the command displays information about the Vservers that have the specified audit guarantee value.

    Examples

    The following example displays the name, audit state, event types, log format, and target directory for all Vservers.

    cluster1::> vserver audit show
    Vserver     State  Event Types Log Format Target Directory
     ----------- ------ ----------- ---------- --------------------
     vs1         false  file-ops    evtx       /audit_log

    The following example displays the Vserver names and details about the audit log for all Vservers.

    cluster1::> vserver audit show -log-save-details
    Rotation                           Rotation
     Vserver     File Size Rotation Schedule        Limit
     ----------- --------- ------------------------ --------
     vs1         100MB     -                        0

    The following example displays in list form all audit configuration information about all Vservers.

    cluster1::> vserver audit show -instance
    Vserver: vs1
                          Auditing state: true
                    Log Destination Path: /audit_log
           Categories of Events to Audit: file-ops
                              Log Format: evtx
                     Log File Size Limit: 100MB
            Log Rotation Schedule: Month: -
      Log Rotation Schedule: Day of Week: -
              Log Rotation Schedule: Day: -
             Log Rotation Schedule: Hour: -
           Log Rotation Schedule: Minute: -
                      Rotation Schedules: -
                Log Files Rotation Limit: 0
                      Log Retention Time: 0s
    Top of Page