Storage

Registros do administrador da plataforma

Campos na entrada de registro que contêm informações de auditoria
Metadados de auditoria Nome do campo de auditoria Valor
Identidade de usuário ou serviço user.identity

Por exemplo,

"user":{
  "identity":"root-admin-client-cert"
}

Recurso de destino

(Detalhes do recurso que está sendo acessado)

resource

Por exemplo,

"resource": {
  "Application": "ontapi",
  "Hostname": "aa-aa-stge01-02",
  "StorageVirtualMachine": "root-admin"
}

Observação: isso foi analisado do valor da string JSON original.

Ação

(Campos que contêm a operação realizada)

action

Por exemplo (visualização parcial):

<netapp xmlns="http://www.netapp.com/filer/admin" version="1.21" vfiler="root-admin">
  <ems-autosupport-log>
    <app-version>1</app-version>
    <auto-support>false</auto-support>
    <category>heartbeat</category>
    <computer-name>gpc-adhoc-d0c087e7vm-admin-node0-zone1</computer-name>
    <event-description>{"version":"23.10.0-custom+601b7ce938be9b603524454285ddbf1b2918c33c","backendUUID":"5dee53d1-ab72-4e4e-9177-3fceddfe2eb2","platform":"kubernetes","platformVersion":"v1.30.5-gke.200","plugin":"ontap-san","svm":"root-admin","storagePrefix":"trident_"}</event-description>
    <event-id>1</event-id>
    <event-source>trident</event-source>
    ...
  </ems-autosupport-log>
</netapp>

Observação: essa era uma string XML no registro original.

Carimbo de data/hora do evento time

Por exemplo,

"time": "2024-12-01T15:24:07Z"

Origem da ação sourceIPs

Por exemplo,

"sourceIPs": ["10.200.0.2"]

Resultado/Resposta response

Por exemplo,

"response": "pending"

ID da auditoria auditID

Por exemplo,

"auditID": "8589957281"

Outros campos Confira o registro completo. Inclui host, ident e _gdch_org.

Exemplo de registro

{
  "time": "2024-12-01T15:24:07Z",
  "auditID": "8589957281",
  "user": {
    "identity": "root-admin-client-cert"
  },
  "resource": "{\"Application\":\"ontapi\",\"Hostname\":\"aa-aa-stge01-02\",\"StorageVirtualMachine\":\"root-admin\"}",
  "action": "<netapp xmlns=\"[http://www.netapp.com/filer/admin](http://www.netapp.com/filer/admin)\" version=\"1.21\" vfiler=\"root-admin\">         <ems-autosupport-log>     <app-version>1</app-version>     <auto-support>false</auto-support>     <category>heartbeat</category>     <computer-name>gpc-adhoc-d0c087e7vm-admin-node0-zone1</computer-name>     <event-description>{\"version\":\"23.10.0-custom+601b7ce938be9b603524454285ddbf1b2918c33c\",\"backendUUID\":\"5dee53d1-ab72-4e4e-9177-3fceddfe2eb2\",\"platform\":\"kubernetes\",\"platformVersion\":\"v1.30.5-gke.200\",\"plugin\":\"ontap-san\",\"svm\":\"root-admin\",\"storagePrefix\":\"trident_\"}</event-description>     <event-id>1</event-id>     <event-source>trident</...",
  "sourceIPs": [
    "10.200.0.2"
  ],
  "response": "pending",
  "_gdch_org": "root-admin",
  "host": "storage",
  "ident": "storage",
  "pid": "-",
  "msgid": "-",
  "extradata": "-",
  "message": "{\"time\":\"2024-12-01T15:24:07Z\",\"auditID\":\"8589957281\",\"user\":{\"identity\":\"root-admin-client-cert\"},\"resource\":\"{\\\"Application\\\":\\\"ontapi\\\",\\\"Hostname\\\":\\\"aa-aa-stge01-02\\\",\\\"StorageVirtualMachine\\\":\\\"root-admin\\\"}\",\"action\":\"\\u003cnetapp xmlns=\\\"[http://www.netapp.com/filer/admin](http://www.netapp.com/filer/admin)\\\" version=\\\"1.21\\\" vfiler=\\\"root-admin\\\"\\u003e              \\u003cems-autosupport-log\\u003e      \\u003capp-version\\u003e1\\u003c/app-version\\u003e      \\u003cauto-support\\u003efalse\\u003c/auto-support\\u003e      \\u003ccategory\\u003eheartbeat\\u003c/category\\u003e      \\u003ccomputer-name\\u003egpc-adhoc-d0c087e7vm-admin-node0-zone1\\u003c/computer-name\\u003e      \\u003cevent-description\\u003e{\\u0026#34;version\\u0026#34;:\\u0026#34;23.10.0-custom+601b7ce938be9b603524454285ddbf1b2918c33c\\u0026#34;,\\u0026#34;backendUUID\\u0026#34;:\\u0026#34;5dee53d1-ab72-4e4e-9177-3fceddfe2eb2\\u0026#34;,\\u0026#34;platform\\u0026#34;:\\u0026#34;kubernetes\\u0026#34;,\\u0026#34;platformVersion\\u0026#34;:\\u0026#34;v1.30.5-gke.200\\u0026#34;,\\u0026#34;plugin\\u0026#34;:\\u0026#34;ontap-san\\u0026#34;,\\u0026#34;svm\\u0026#34;:\\u0026#34;root-admin\\u0026#34;,\\u0026#34;storagePrefix\\u0026#34;:\\u0026#34;trident_\\u0026#34;}\\u003c/event-description\\u003e      \\u003cevent-id\\u003e1\\u003c/event-id\\u003e      \\u003cevent-source\\u003etrident\\u003c/...\",\"sourceIPs\":[\"10.200.0.2\"],\"response\":\"pending\",\"_gdch_org\":\"root-admin\"}"
}

Registros do operador de infraestrutura

Campos na entrada de registro que contêm informações de auditoria
Metadados de auditoria Nome do campo de auditoria Valor
Identidade de usuário ou serviço user.identity

Por exemplo,

"user":{
  "identity":"root-admin-client-cert"
}

Recurso de destino

(Detalhes do recurso que está sendo acessado)

resource

Por exemplo,

"resource": {
  "Application": "ontapi",
  "Hostname": "aa-aa-stge01-02",
  "StorageVirtualMachine": "root-admin"
}

Observação: isso foi analisado do valor da string JSON original.

Ação

(Campos que contêm a operação realizada)

action

Exemplo:

<netapp xmlns="http://www.netapp.com/filer/admin" version="1.21" vfiler="root-admin">
  <volume-size>
    <volume>trident_pvc_ae2f25d7_51f3_4cc1_b24b_650ff25ca96c</volume>
  </volume-size>
</netapp>

Observação: essa era uma string XML no registro original.

Carimbo de data/hora do evento time

Por exemplo,

"time": "2024-11-27T00:15:12Z"

Origem da ação sourceIPs

Por exemplo,

"sourceIPs": ["10.200.0.3"]

Resultado/Resposta response

Por exemplo,

"response": "pending"

ID da auditoria auditID

Por exemplo,

"auditID": "8589956251"

Outros campos Confira o registro completo. Inclui host, ident e _gdch_org.

Exemplo de registro

{
  "time": "2024-11-27T00:15:12Z",
  "auditID": "8589956251",
  "user": {
    "identity": "root-admin-client-cert"
  },
  "resource": "{\"Application\":\"ontapi\",\"Hostname\":\"aa-aa-stge01-02\",\"StorageVirtualMachine\":\"root-admin\"}",
  "action": "<netapp xmlns=\"[http://www.netapp.com/filer/admin](http://www.netapp.com/filer/admin)\" version=\"1.21\" vfiler=\"root-admin\">         <volume-size>     <volume>trident_pvc_ae2f25d7_51f3_4cc1_b24b_650ff25ca96c</volume> </volume-size>         </netapp>",
  "sourceIPs": [
    "10.200.0.3"
  ],
  "response": "pending",
  "_gdch_org": "root-admin",
  "host": "storage",
  "ident": "storage",
  "pid": "-",
  "msgid": "-",
  "extradata": "-",
  "message": "{\"time\":\"2024-11-27T00:15:12Z\",\"auditID\":\"8589956251\",\"user\":{\"identity\":\"root-admin-client-cert\"},\"resource\":\"{\\\"Application\\\":\\\"ontapi\\\",\\\"Hostname\\\":\\\"aa-aa-stge01-02\\\",\\\"StorageVirtualMachine\\\":\\\"root-admin\\\"}\",\"action\":\"\\u003cnetapp xmlns=\\\"[http://www.netapp.com/filer/admin](http://www.netapp.com/filer/admin)\\\" version=\\\"1.21\\\" vfiler=\\\"root-admin\\\"\\u003e              \\u003cvolume-size\\u003e      \\u003cvolume\\u003etrident_pvc_ae2f25d7_51f3_4cc1_b24b_650ff25ca96c\\u003c/volume\\u003e  \\u003c/volume-size\\u003e           \\u003c/netapp\\u003e\",\"sourceIPs\":[\"10.200.0.3\"],\"response\":\"pending\",\"_gdch_org\":\"root-admin\"}"
}