Hi Toasters,

I have three ntfs volumes on a F880. Looking through the cifs audit log, there are entries (file acess/delete, etc..) for two of the volumes but not the third. The audit should audit for the Filer on all volumes. But seems like one volume has no entries at all in the cifs log.

Environment:

F880, DOT 6.4.2.P12, cifs only,

cifs.audit.autosave.file.extension

cifs.audit.autosave.file.limit 0

cifs.audit.autosave.onsize.enable off

cifs.audit.autosave.onsize.threshold 75%

cifs.audit.autosave.ontime.enable off

cifs.audit.autosave.ontime.interval

cifs.audit.enable on

cifs.audit.file_access_events.enable on

cifs.audit.logon_events.enable on

cifs.audit.logsize 204800000

cifs.audit.saveas /etc/log/adtlog.evt

Any ideas??

Thanks,

Marcus Bui AIM Investments IT Services phone: 713-986-9061 fax: 713-821-9524 email: marcus.bui@aiminvestments.com pager: 8773450839@archwireless.net

----------------------------------------- Confidentiality Note: The information contained in this message, and any attachments, may contain confidential and/or privileged material. It is intended solely for the person or entity to which it is addressed. Any review, retransmission, dissemination, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.