<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr">
<p>Thanks John,</p>
<p><br>
</p>
<p>As I said to Aaron I will also take a look at this on Monday.</p>
<p><br>
</p>
<p>Regards</p>
<p>Richard<br>
</p>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> gpfsug-discuss-bounces@spectrumscale.org <gpfsug-discuss-bounces@spectrumscale.org> on behalf of John T Olson <jtolson@us.ibm.com><br>
<b>Sent:</b> 09 December 2016 14:32<br>
<b>To:</b> gpfsug main discussion list<br>
<b>Subject:</b> Re: [gpfsug-discuss] Auditing of SMB file access</font>
<div> </div>
</div>
<div>
<p>Richard,<br>
<br>
I recently published a white paper in the Spectrum Scale wiki in developerworks about using Varonis with Spectrum Scale for auditing. This paper includes what type of file events are recognizable with the proposed setup. Here is link to the paper:
<a href="https://www.ibm.com/developerworks/community/wikis/form/anonymous/api/wiki/fa32927c-e904-49cc-a4cc-870bcc8e307c/page/f0cc9b82-a133-41b4-83fe-3f560e95b35a/attachment/0ab62645-e0ab-4377-81e7-abd11879bb75/media/Spectrum_Scale_Varonis_Audit_Logging.pdf" id="LPlnk223715" previewremoved="true">
https://www.ibm.com/developerworks/community/wikis/form/anonymous/api/wiki/fa32927c-e904-49cc-a4cc-870bcc8e307c/page/f0cc9b82-a133-41b4-83fe-3f560e95b35a/attachment/0ab62645-e0ab-4377-81e7-abd11879bb75/media/Spectrum_Scale_Varonis_Audit_Logging.pdf</a><br>
<br>
Note that you have to register with developerworks, but it is a free registration.<br>
<br>
Thanks,<br>
<br>
John<br>
<br>
John T. Olson, Ph.D., MI.C., K.EY.<br>
Master Inventor, Software Defined Storage<br>
957/9032-1 Tucson, AZ, 85744<br>
(520) 799-5185, tie 321-5185 (FAX: 520-799-4237)<br>
Email: jtolson@us.ibm.com<br>
"Do or do not. There is no try." - Yoda<br>
<br>
Olson's Razor:<br>
Any situation that we, as humans, can encounter in life<br>
can be modeled by either an episode of The Simpsons<br>
or Seinfeld.<br>
<br>
<img naturalheight="16" naturalwidth="16" alt="Inactive hide details for Aaron Knister ---12/09/2016 06:21:40 AM---Hi Richard, Does this help?" aria-expanded="false" tabindex="0" style="-moz-user-select: none;" height="16" width="16" border="0" src="cid:1__=8FBB0A17DFDD384B8f9e8a93df938690918c8FB@"><font color="#424282">Aaron
Knister ---12/09/2016 06:21:40 AM---Hi Richard, Does this help?</font><br>
<br>
<font size="2" color="#5F5F5F">From: </font><font size="2">Aaron Knister <aaron.knister@gmail.com></font><br>
<font size="2" color="#5F5F5F">To: </font><font size="2">gpfsug main discussion list <gpfsug-discuss@spectrumscale.org></font><br>
<font size="2" color="#5F5F5F">Date: </font><font size="2">12/09/2016 06:21 AM</font><br>
<font size="2" color="#5F5F5F">Subject: </font><font size="2">Re: [gpfsug-discuss] Auditing of SMB file access</font><br>
<font size="2" color="#5F5F5F">Sent by: </font><font size="2">gpfsug-discuss-bounces@spectrumscale.org</font><br>
</p>
<hr style="color:#8091A5" width="100%" size="2" noshade="" align="left">
<br>
<br>
<br>
<font size="4">Hi Richard,</font><br>
<br>
<font size="4">Does this help?</font><br>
<br>
<a href="https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp/?client=safari" id="LPlnk834525" previewremoved="true"><u><font size="4" color="#0000FF">https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp</font></u></a>
<div id="LPBorder_GT_14813144767690.17078072202316108" style="margin-bottom: 20px; overflow: auto; width: 100%; text-indent: 0px;">
<table id="LPContainer_14813144767630.31434079113878655" style="width: 90%; background-color: rgb(255, 255, 255); position: relative; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top: 1px dotted rgb(200, 200, 200); border-bottom: 1px dotted rgb(200, 200, 200);" cellspacing="0">
<tbody>
<tr style="border-spacing: 0px;" valign="top">
<td id="ImageCell_14813144767640.5230800251853589" style="width: 250px; position: relative; display: table-cell; padding-right: 20px;" colspan="1">
<div id="LPImageContainer_14813144767640.6347653712562713" style="background-color: rgb(255, 255, 255); height: 200px; position: relative; margin: auto; display: table; width: 200px;">
<a id="LPImageAnchor_14813144767650.3345274801395397" style="display: table-cell; text-align: center;" href="https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp/?client=safari" target="_blank"><img style="display: inline-block; max-width: 250px; max-height: 250px; height: 200px; width: 200px; border-width: 0px; vertical-align: bottom;" aria-label="Preview image with link selected. Double-tap to open the link." id="LPThumbnailImageID_14813144767660.5767749033017711" height="200" width="200" src="https://s0.wp.com/i/blank.jpg"></a></div>
</td>
<td id="TextCell_14813144767660.2086596314237973" style="vertical-align: top; position: relative; padding: 0px; display: table-cell;" colspan="2">
<div id="LPRemovePreviewContainer_14813144767660.9961681228494428"></div>
<div id="LPTitle_14813144767660.9299260433803478" style="top: 0px; color: rgb(2, 44, 90); font-weight: 400; font-size: 21px; font-family: "wf_segoe-ui_light","Segoe UI Light","Segoe WP Light","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; line-height: 21px;">
<a id="LPUrlAnchor_14813144767670.31526393554476373" style="text-decoration: none;" href="https://moiristo.wordpress.com/2009/08/10/samba-logging-user-activity/amp/?client=safari" target="_blank">Samba: Logging User Activity</a></div>
<div id="LPMetadata_14813144767680.46158283421088175" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); font-weight: 400; font-family: "wf_segoe-ui_normal","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; font-size: 14px; line-height: 14px;">
moiristo.wordpress.com</div>
<div id="LPDescription_14813144767690.7151276394155124" style="display: block; color: rgb(102, 102, 102); font-weight: 400; font-family: "wf_segoe-ui_normal","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif; font-size: 14px; line-height: 20px; max-height: 100px; overflow: hidden;">
Ever wondered why Samba seems to log so many things, except what you’re interested in? So did I, and it took me a while to find out that 1) there actually is a solution and 2) how to configur…</div>
</td>
</tr>
</tbody>
</table>
</div>
<br>
<br>
<font size="4">I've not used CES so I don't know at what level it manages the samba configuration file or how easily these changes could be integrated in light of that.
<br>
</font><br>
<font size="4">Sent from my iPhone</font><br>
<font size="4"><br>
On Dec 9, 2016, at 6:52 AM, Sobey, Richard A <</font><a href="mailto:r.sobey@imperial.ac.uk"><u><font size="4" color="#0000FF">r.sobey@imperial.ac.uk</font></u></a><font size="4">> wrote:<br>
</font>
<ul>
<ul>
<font face="Calibri">Hi all,</font><br>
<font face="Calibri"></font><br>
<font face="Calibri">Is there any auditing we can enable to track changes and accesses to files/folders on GPFS (via SMB/CES if that matters).</font><br>
<font face="Calibri"></font><br>
<font face="Calibri">Cheers</font><br>
<font face="Calibri">Richard</font>
<p><font size="4">_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at </font><a href="http://spectrumscale.org/"><u><font size="4" color="#0563C1">spectrumscale.org</font></u></a><u><font size="4" color="#0563C1"><br>
</font></u><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><u><font size="4" color="#0563C1">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</font></u></a><tt>_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at spectrumscale.org<br>
</tt><tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></tt><tt><br>
</tt></p>
<p></p>
<p></p>
</ul>
</ul>
<br>
</div>
</div>
</div>
</body>
</html>