Enable system configuration auditing

OneFS can audit system configuration events on the Isilon cluster. All configuration events that are handled by the API including writes, modifications, and deletions are tracked and recorded in the config audit topic directories. When you enable or disable system configuration auditing, no additional configuration is required.

About this task

Configuration events are logged to /var/log/audit_config.log only if you have enabled syslog forwarding for config audit. Configuration change logs are populated in the config topic in the audit back-end store under /ifs/.ifsvar/audit.

Note Image

Configuration events are not forwarded to the Common Event Enabler (CEE).

Procedure

  1. Click Cluster Management > Auditing.
  2. In the Settings area, select the Enable Configuration Change Auditing check box.
  3. Click Save Changes.

What to do next

You can enable forwarding of system configuration changes to syslog by running the isi audit settings global modify command with the --config-syslog-enabled option. This procedure is available only through the command-line interface.