NFS auditing can record access events for files and directories, but it cannot record logon, logoff, and other events supported by CIFS auditing. The file or directory to be audited can be in a volume or qtree of any security style (NTFS, UNIX, or mixed).
Auditing is disabled by default.