<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10pt" ><div dir="ltr" >Hello Dave,</div>
<div dir="ltr" > </div>
<div dir="ltr" ><div>This seems like unexpected behavior, especially the part where you need to disable/re-enable FAL to see the records.<br><br>To answer your question</div>
<div><em><span style="white-space: pre-wrap; font-size: 10pt;" >Is it intended for the audit mechanism to be a soft audit? i.e the</span></em></div>
<div><em>audit is best effort, and non blocking for file access.</em></div>
<div>>>> file audit logging is indeed best effort. We buffer the records in memory and write them out at a later time, therefore non blocking for file accesses. You can verify if any records have been dropped with the "mmdiag --eventproducer" command. This command is per node, and will show if audit messages were dropped in the "Msg failed: " field. Even though audit is enabled on your NSD node, the client nodes where the file accesses happen do the buffering/writing. So make sure to runn the mmdiag --eventproducer command from the node where the file accesses are happening. </div>
<div> </div>
<div> </div>
<div> </div></div>
<div dir="ltr" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10pt" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div class="socmaildefaultfont" dir="ltr" style="font-family:Arial, Helvetica, sans-serif;font-size:10.5pt" ><div dir="ltr" style="font-size: 12pt; font-weight: bold; font-family: sans-serif; color: #7C7C5F;" ><span style="background-color: rgb(255, 255, 255); color: rgb(18, 18, 18); font-family: Arial; font-size: 14px; font-weight: normal;" >Thanks,</span></div>
<div dir="ltr" style="font-size: 8pt; font-family: sans-serif; margin-top: 10px;" ><table border="0" cellpadding="0" cellspacing="0" height="104" width="600" > <tbody style="outline: none;" > <tr style="outline: none;" valign="top" > <td style="outline: none;" valign="middle" width="202" > <ul style="outline: none; padding-left: 0pt; margin-left: 0px; list-style-type: none;" > <li style="outline: none; margin-top: 0px;" ><font color="#008000" style="outline: none;" ><font size="2" style="outline: none;" ><font face="Arial" style="outline: none;" ><b style="outline: none;" >Luis I. Teran</b></font></font></font><font face="Arial" size="1" style="outline: none;" > <span> </span></font><br style="outline: none;" > Software Developer</li> <li style="outline: none; margin-top: 0px;" >Scalable Data Interfaces</li> <li style="outline: none; margin-top: 0px;" ><font face="Arial" size="1" style="outline: none;" >IBM Spectrum Scale</font></li> <li style="outline: none; margin-top: 0px;" ><font face="Arial" size="1" style="outline: none;" >luis.i.teran@ibm.com</font></li> <li style="outline: none; margin-top: 0px;" ><font face="Arial" size="1" >+1-520 799 2346</font></li> </ul> </td> <td style="outline: none;" valign="middle" width="26" > <ul style="outline: none; padding-left: 0pt; margin-left: 0px; list-style-type: none;" > <li style="outline: none; margin-top: 0px;" ><font size="3" style="outline: none;" > </font></li> </ul> </td> <td style="outline: none;" valign="middle" width="372" > <div style="outline: none; margin-top: 0px;" > </div> </td> </tr> </tbody></table></div></div></div></div></div></div></div></div><BR>