Question

File Share audit trails

  • 22 September 2022
  • 2 replies
  • 73 views
StuB
Userlevel 1
Badge +1

I have a customer currently deploying Nutanix Files and they are looking to use File Analytics in place of their current audit tool, Lepide.

They are happy with the file-level audit trails in FA, but have asked if the same audit trails are available for Shares - e.g. Is there a log anywhere of who created a specific Share, who last modified it, or who deleted it?  I can’t find an answer to this in the documentation, and if I create a share in the Files Demo all I get is an “Event” in the Files console which doesn’t tell me who did it.

2 replies

Moustafa Hindawi
Userlevel 5
Badge +6

I have a customer currently deploying Nutanix Files and they are looking to use File Analytics in place of their current audit tool, Lepide.

They are happy with the file-level audit trails in FA, but have asked if the same audit trails are available for Shares - e.g. Is there a log anywhere of who created a specific Share, who last modified it, or who deleted it?  I can’t find an answer to this in the documentation, and if I create a share in the Files Demo all I get is an “Event” in the Files console which doesn’t tell me who did it.

Hello 

Yes, you can as below:

The Audit Details page shows the following audit information for the selected folder.

  • A Folder Events graph displays various operations performed on the file during the selected period, and the percentage of time each operation has occurred per total operations during that period.
    • The Filter by operations dropdown contains operation filters, which you can use to filter the audit by operation type. Operations include:
      • Select All
      • Make Directory
      • Permission Changed
      • Permission Denied
      • Remove Directory
      • Rename

        Note: Rename operation shows both change of name and change of path for specific file or folder.

      • Set Attribute

The Results table provides granular details of the audit results. File Analytics displays the following data for every event.

  • User Name
  • Client IP
  • Operation
  • Operation Date

 

 

Reference: https://portal.nutanix.com/page/documents/details?targetId=File-Analytics-v3_2:ana-analytics-audit-folders-r.html

Moustafa Hindawi | Blogger | Nutanix Technology Champion | NCSE | NCM-MCI | VMCE | 2xVCAP-DTM & DCV | 2xVCP-NV & CMA | LinkedIn: https://www.linkedin.com/in/moustafaadelmoustafa/ | My Blog: https://cloudwhales.co.uk/author/mhindawi/
StuB
Userlevel 1
Badge +1

Hi,

Thanks for this, but I don’t believe an audit of “Folder” operations is the same as an audit of “Share” operations.  In this case, the folder is basically another file, but it doesn’t help to see who shared that folder and when.

Reply


Terms & Conditions