How to Configuring Share Auditing

1. Open Computer Management (run compmgmt.msc).
2. Click More Actions > Connect to another computer.
3. Type the IP or DNS of the EVS.
4. Click OK.
5. Navigate to System Tools > Shared Folders > Shares.
6. The EVS shares display on the right.
7. Right click on a share, and select Properties.
8. Click the Security tab.
9. Click Advanced
10. The Advanced Security Settings window displays.
11. Select the Auditing tab.
12. Click Add or Edit to add/edit users/groups to be audited.
13. Select Everyone to make the EVS log events for all users.
14. Select Success in the Type field.
15. Select Full Control in the Basic Permissions field.

16. Repeat to audit additional shares.

    To avoid unnecessary overhead, define only those users or groups to be monitored, as well as any actions required for monitoring. (For example, removing Read will result in much less overhead on the HNAS.)
    HSD may provide more information on how to avoid unnecessary overhead.

17. Generate activity on the shares created in a required file system in order to verify if auditing is enabled on the EVS for that file system.

18. Execute the following command on the Hitachi NAS Console to see if the events are generated:

    audit-log-show <Name of file system>