Skip to main content

Display information about security trace filters in ONTAP SVMs

Contributors netapp-pc21187 netapp-barbe netapp-aaron-holt netapp-aherbin

View security trace filter details on your storage virtual machine (SVM) to identify the access events each filter traces.

System Manager

Beginning with ONTAP 9.6, you can use System Manager to trace file access on the SVM.

Steps
  1. Open the System Manager dashboard.

  2. Under Cluster, select Storage VMs.

  3. Select Menu options icon for the applicable SVM.

  4. Select Trace file access.

  5. Set the file access protocol type to SMB/CIFS or NFS.

  6. Enter the User name.

  7. Enter the Client IP address.

  8. Optionally, select one or more of the following:

    1. Select Trace particular path to specify the file or file path to trace.

    2. Select Show only access denied entries to limit the trace to access denied events.

  9. Select Start tracing.

CLI

Use the CLI to trace file access on the SVM.

Step
  1. Display information about security trace filter entries by using the vserver security trace filter show command.

    Learn more about vserver security trace filter show in the ONTAP command reference.

Examples

The following command displays information about all security trace filters on SVM vs1:

cluster1::> vserver security trace filter show -vserver vs1
Vserver  Index   Client-IP            Path            Trace-Allow  Windows-Name
-------- -----  -----------  ----------------------   -----------  -------------
vs1        1    -            /dir1/dir2/file.txt          yes      -
vs1        2    -            /dir3/dir4/                  no       mydomain\joe