Skip to main content

Viewing audit event logs

You can use audit event logs to determine whether you have adequate file security and whether there have been improper file and folder access attempts. You can view and process audit event logs saved in the EVTX or XML file formats.

  • EVTX file format

    You can open the converted EVTX audit event logs as saved files using Microsoft Event Viewer.

    There are two options that you can use when viewing event logs using Event Viewer:

    • General view

      Information that is common to all events is displayed for the event record. In this version of ONTAP, the event-specific data for the event record is not displayed. You can use the detailed view to display event-specific data.

    • Detailed view

      A friendly view and an XML view are available. The friendly view and the XML view display both the information that is common to all events and the event-specific data for the event record.

  • XML file forma

    t

    You can view and process XML audit event logs on third-party applications that support the XML file format. XML viewing tools can be used to view the audit logs provided you have the XML schema and information about definitions for the XML fields.