跳转到主内容

审核日志不会每5分钟轮换一次

i
Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

  • ONTAP 9
  • 审核

问题描述

  • 基于文件大小和计划的日志文件轮换无法按预期工作。

::> vserver audit show -vserver svm1 -instance

              Vserver: svm1
           Auditing State: true
        Log Destination Path: /AuditLogs
   Categories of Events to Audit: file-ops, file-share,
                   authorization-policy-change,
                   cifs-logon-logoff, cap-staging,
                   user-account, audit-policy-change
             Log Format: xml
        Log File Size Limit: 10MB
    Log Rotation Schedule: Month: -
Log Rotation Schedule: Day of Week: -
     Log Rotation Schedule: Day: -
    Log Rotation Schedule: Hour: -
   Log Rotation Schedule: Minute: 0, 5, 10, 15, 20, 25, 30, 35, 40, 45, 50, 55
        Rotation Schedules: @:00,:05,:10,:15,:20,:25,:30,:35,:40,:45,:50,:55
      Log Files Rotation Limit: 0
       Log Retention Duration: 0s

  • 当日志文件的大小达到配置的大小限制时、日志文件将轮换。但是、它不会按计划时间轮换、而是会延迟轮换。