Configure protocol audited zones

Only the protocol audit events within an audited zone are captured and sent to the CEE server. Therefore, you must configure a protocol audited zone to send audit events.

Procedure

  1. Open a Secure Shell (SSH) connection to any node in the cluster and log in.
  2. Run the isi audit settings global modify command with the - -audited-zones option to configure protocol audited zones.
    The following command configures HomeDirectory and Misc as the protocol audited zones: 
    isi audit settings global modify --audited-zones=HomeDirectory,Misc