How to Configure the Audit Log Consolidated Cache

1. Log into the Hitachi NAS Admin Services’ EVS using SSH with administrator credentials.

2. Execute the following command to switch from admin EVS to file services EVS:

   console-context --evs <EVS name>

3. Execute the following command to configure the audit log consolidated cache:

   audit-log-consolidated-cache add -s <Size> <EVS name>

   For example, in audit-log-consolidated-cache add -s 50MB [file system name], the [file system name] is the name of the EVS file system on which the audit log consolidated cache file is stored. It is recommended that disk space of at least 50 MB be provisioned for an audit log consolidated cache to avoid losing events. It is also recommended that a new file system be created for the audit log consolidated cache.

4. Increase the size of the Event Pool in the EventLogEventCache by running the following command:

   fsm set auto-heap-pool-sizeEventLogEventCache::Event 200000

   The pool limit can be increased to 200,000, which is enough for a 50 MB audit log consolidated cache.