Who is deleting the file

Kyle O'Donnell redhat at isprime.org
Thu Mar 31 16:05:23 UTC 2011


We have this issue, turn on auditing on the netapp. there are a number of
auditing features that you can enable on the netapp, but if you turn them
all on the performance on the filer will slowwwwww.  i suggest only enabling
the 'delete' auditing facility.

--kyleo

On Thu, Mar 31, 2011 at 9:20 AM, Abhilash abhi <abhilashck72 at gmail.com>wrote:

> And Don't suggest history command..its not possible to log in as individual
> user belongs to X and check history since the number of users under group X
> is so large..and history list is very large and old entries will be
> deleting..
>
>
> On Thu, Mar 31, 2011 at 6:25 PM, Abhilash abhi <abhilashck72 at gmail.com
> >wrote:
>
> > Hi All,
> >
> > I have one directory which contains some files..and the directory is
> owned
> > by some group called X. All files within the directory have group
> membership
> > X since SGID is set .some files are frequently missing from that
> directory
> > and i am restoring it through snapshots(Netapp filer). Is there anyway to
> > find out who is (which user) or by what operation deleted the file??
> >
> > --
> >
> > Regards,
> > Abhilash
> >
> > --
> >
> > Regards,
> > Abhilash
> >
>
>
>
> --
>
> Regards,
> Abhilash
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
>



More information about the redhat-list mailing list