6.5 HP StoreAll OS User Guide

NOTE:
• The output file listed on the MDExport.pl command line must be in a directory that will be
replicated by CRR.
• The <mountpoint>/.archiving directory is excluded from replication. The
ibrix_audit_reports command creates its report output file in the <mountpoint>/
.archiving/reports subdirectory. Therefore, after issuing the ibrix_audit_reports
command, your script must move or copy the report output file to another directory on the file
system outside the .archiving tree for it to be replicated.
Metadata and synchronized server times
Metadata database updates often require coordinated actions from multiple StoreAll servers.
Therefore, it is important to keep your nodes as close together in time as possible, using NTP.
Modifications to the same file from different servers within the time difference between StoreAll
servers could cause inconsistencies between system metadata stored in the file inode and the
metadata stored in Express Query.
Managing auditing
Auditing lets you:
• Find out which events you have already captured in the Express Query database and control
what gets captured in regards to file changes in the Express Query database. See “Viewing
the audit log” (page 299) for more information.
• Gather information from audit reports as to what is in the Express Query database. See
“Managing audit log reports” (page 302) for more information.
Viewing the audit log
The audit log provides a detailed history of activity for specific file system events. The Audit Log
panel shows the current audit configuration.
To access the audit log, click Filesystems in the Navigator panel. Then, select Express Query >
Auditing in the lower Navigator. The Audit Log panel indicates whether auditing is turned on or
off. If on, it lists details about the audit log configuration (how long audit logs and audit log reports
are retained and the schedule for determining when audit log reports reach expiration.
From the Audit Log panel, you can run a report or modify the auditing configuration for the selected
file system. To manage the auditing configuration using the CLI, see the ibrix_fs command in
the HP StoreAll OS CLI Reference Guide.
Metadata and synchronized server times 299