You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-netapp-files/manage-file-access-logs.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -27,8 +27,8 @@ File access logs provide file access logging for individual volumes, capturing f
27
27
28
28
* Once file access logs are enabled on a volume, they can take up to five minutes to become visible.
29
29
* File access logs occasionally create duplicate logs that must be manually filtered.
30
-
* If you delete any diagnostic settings configured for `ANFFileAccess`, it will cause file access logs for any volumes with that setting to be disabled.
31
-
* Before enabling file access logs on a volume, either [ACLs](configure-access-control-lists.md) or Audit ACEs need to be set on a file or directory. ACLs or Audit ACEs must be set after mounting a volume.
30
+
* If you delete any diagnostic settings configured for `ANFFileAccess`, it will disable file access logs for any volumes with that setting.
31
+
* Before enabling file access logs on a volume, either [ACLs](configure-access-control-lists.md) or Audit ACEs need to be set on a file or directory. You must set ACLs or Audit ACEs after mounting a volume.
32
32
* File access logs provide no explicit or implicit expectations or guarantees around logging for auditing and compliance purposes.
33
33
34
34
## Recognized events
@@ -40,7 +40,7 @@ The events capture in file access logs depend on the protocol your volume uses.
40
40
* Create
41
41
* Get attributes
42
42
* Link
43
-
* Nverify
43
+
*`Nverify`
44
44
* Open
45
45
* Open attribute
46
46
* Read
@@ -86,15 +86,15 @@ While in preview, file access logs is supported in:
86
86
87
87
You must set system access control lists (SACLs) for SMB shares or Audit ACEs (for NFSv4.1 shares) for auditing.
88
88
89
-
After mounting the volume, SACLs (in case of an SMB/CIFS share) or Audit ACEs (in case of an NFSv4 mount) needs to be set on files/directories for auditing of file operations to happen on the volume.
89
+
After mounting the volume, SACLs (for an SMB/CIFS share) or Audit ACEs (for an NFSv4.1 mount) needs to be set on files/directories for auditing of file operations to happen on the volume.
90
90
91
91
### [Set SACLs for SMB shares](#tab/sacls-smb)
92
92
93
93
There are three ways to set SACLs for access logs.
94
94
95
-
If you are logging access events on all files and directories within a volume or qtree, set SACLs by applying Storage-Level Access Guard security.
95
+
If you're logging access events on all files and directories within a volume, set SACLs by applying Storage-Level Access Guard security.
96
96
97
-
If you are logging access events on individual files and directories, setting of SACLs with:
97
+
If you're logging access events on individual files and directories, setting of SACLs with:
98
98
* The Windows Explorer GUI
99
99
* The `fsecurity` command
100
100
@@ -116,7 +116,7 @@ To enable logging access on individual files and directories, complete the follo
116
116
117
117
Configure logging for UNIX security style files and directories by adding audit ACEs to NFSv4.1 ACLs to monitoring of certain NFS file and directory access events for security purposes.
118
118
119
-
For NFSv4.1, both discretionary and system ACEs are stored in the same ACL. They are not stored in separate DACLs and SACLs. Exercise caution when adding audit ACEs to an existing ACL to avoid overwriting and losing an existing ACL. The order in which you add audit ACEs to an existing ACL doesn't matter.
119
+
For NFSv4.1, both discretionary and system ACEs are stored in the same ACL, not separate DACLs and SACLs. Exercise caution when adding audit ACEs to an existing ACL to avoid overwriting and losing an existing ACL. The order in which you add audit ACEs to an existing ACL doesn't matter.
120
120
121
121
For steps, see [Configure access control lists on NFSv4.1 volumes](configure-access-control-lists.md).
0 commit comments