Table of ContentsView in Frames

Automatic saving of audit events

You can specify that the storage system saves audit events automatically to the event log based on a time interval or the size of the internal log file—that is, how full the cifsaudit.alf file is.

If you specify both a size threshold and a time interval, audit events are saved to the event log whenever the size threshold or the time interval is reached. The default for the size threshold is 75 percent. The default for the time interval is one day.

Each time the internal log file is automatically saved to the external event file, an extension is added to the base name of the event file. You can select one of the following types of extensions to be added:

If one of these extensions is not specified, a timestamp is used as the file extension; however, the value timestamp is not displayed.

The storage system saves the event files for up to six weeks. You can specify a limit to the number of event files that can be saved.