SMB Audit Logs

To display SMB audit logs for edge filers the following must be performed on each edge filer:

1. Run the following CLI on the edge filer: set /config/beatsClient/enabled true
   Note

   For details about running CLI commands from an edge filer, see Execute CLI Commands from the Administrator User Interface.

2. Enable log forwarding on the edge filer. For details, see Forwarding Logs to the Portal: 7.13, 7.12, 7.11.
3. Enable SMB audit logs on the edge filer. For details, see Auditing SMB File Access: 7.13, 7.12, 7.11.

The number of filtered entries or all the entries if there is no filtering.
SMB Audit Logs – The SMB audit log entries for each edge filer operation, including the source edge filer, the user who performed the operation, the timestamp of the operation, and the result of the operation.

Changes in the SMB audit logs are refreshed in CTERA InsightAI every 15-20 minutes.