跳转到主内容

系统日志服务器中填充了来自ONTAP的SNMP获取消息

i
Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

  • ONTAP 9
  • 系统日志

问题描述

  • 已在ONTAP上配置审核日志转发
  • 系统日志服务器中填充了SNMP GET消息、例如:

Sun Jul 09 2023 23:02:20 +00:00 [kern_audit:info:2305] 8203e8000186cbda :: cluster1:snmp :: 10.11.12.13:54957 :: cluster1:mplus :: e58ec5 : 1 : get : .1.3.6.1.4.1.789.1.5.4.1.2.1034 : /vol/svm0_root :: Success:

  • security audit show  显示了这些get命令正在从审核中被逐渐脱离:

::> security audit show
Auditing State for
    Operation Get Requests
    --------- ------------------  
          CLI off
         HTTP off
       ONTAPI off