---
title: "SMB Audit Logs"
slug: "smb-audit-logs"
tags: ["Insight", "InsightAI", "Analytics"]
updated: 2026-09-28T15:19:05Z
published: 2026-09-28T15:19:05Z
canonical: "kb.ctera.com/smb-audit-logs"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.ctera.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SMB Audit Logs

To display SMB audit logs for edge filers the following must be performed on each edge filer:

1. Run the following CLI on the edge filer: `set /config/beatsClient/enabled true`
**Note**

For details about running CLI commands from an edge filer, see [Execute CLI Commands from the Administrator User Interface](/v1/docs/how-to-6).
2. Enable log forwarding on the edge filer. For details, see **Forwarding Logs to the Portal**: [7.13](/v1/docs/forwarding-logs-to-the-portal-1-1), [7.12](/v1/docs/forwarding-logs-to-the-portal-1), [7.11](/v1/docs/forwarding-logs-to-the-portal).
3. Enable SMB audit logs on the edge filer. For details, see **Auditing SMB File Access**: [7.13](/v1/docs/auditing-smb-file-access-5-1-1-1-1), [7.12](/v1/docs/auditing-smb-file-access-5-1-1-1), [7.11](/v1/docs/auditing-smb-file-access-5-1-1).

![Image](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-I8P3PL4M.png?sv=2026-02-06&spr=https&st=2026-11-07T17%3A42%3A29Z&se=2026-11-07T18%3A42%3A29Z&sr=c&sp=r&sig=qW4W9gyboYgJBL4TdgZ36TziImA%2BN1n9wsuKojrzJNY%3D) The number of filtered entries or all the entries if there is no filtering. **SMB Audit Logs** – The SMB audit log entries for each edge filer operation, including the source edge filer, the user who performed the operation, the timestamp of the operation, and the result of the operation.

Changes in the SMB audit logs are refreshed in CTERA InsightAI every 15-20 minutes.