跳转到主内容

审核日志中的可变字符长度

i
Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

  • ONTAP 9
  • 安全审核日志

问题描述

security audit log show 如果输出超过1024个字符、则ONTAP审核日志会被截断

Jun  2 14:01:37 clust-01: clust-01: 0000001a.071e6f3e 126ef713 Fri Jun 02 2023 14:01:35 +02:00
[kern_audit:info:2456] 8503e8000557bf0a :: clust:ontapi :: xxx.xx.xx.xx:49388 :: svmxxx:account :: <netapp version='1.7'
xmlns='http://www.netapp.com/filer/admin' vfiler='svmxxx'><snapshot-modify-iter>^M  <attributes>^M    <snapshot-info>^M      
<snapmirror-label xmlns:q1="http://www.w3.org/2001/XMLSchema" p5:type="q1:string"
xmlns:p5="http://www.w3.org/2001/XMLSchema-instance">Hourly</snapmirror-label>^M    </snapshot-info>^M  </attributes>^M  
<continue-on-failure>false</continue-on-failure>^M  <query>^M    <snapshot-info>^M      <name
xmlns:q2="http://www.w3.org/2001/XMLSchema" p5:type="q2:string" xmlns:p5="http://www.w3.org/2001/XMLSchema-instance">xxxxx -
yyyy_xxxxx_06-02-2023_14.00.37.5149</name>^M      <volume xmlns:q3="http://www.w3.org/2001/XMLSchema" p5:type="q3:string"
xmlns:p5="http://www.w3.org/2001/XMLSchema-instance">iscsi_xxxxx_logdir</volu... ::
Pending: