APIs in Category: audit | Cluster-Mode API version 1.15

audit-get audit-modify | APIs for managing administrative audit settings for the cluster. Audit logging can be enabled/disabled separately for 'set' (read-write) requests and 'get' (read-only) requests, for each of the following access modes: CLI (Command-Line Interface), HTTP, SNMP and the Data ONTAP API (ONTAPI, ZAPI). The state of these flags is represented via the audit-info typedef.

NetApp Manage ONTAP

audit-get | [top]

> Get the cluster administrative audit settings

> Input Name | Range | Type | Description
> desired-attributes |  | audit-info optional | Specify the attributes that should be returned. If not present, all attributes for which information is available will be returned. If present, only the desired attributes for which information is available will be returned.
> Output Name | Range | Type | Description
> attributes |  | audit-info | The attributes of the audit.

> Errno | Description
> EOBJECTNOTFOUND |  |
> EINTERNALERROR |  |

audit-modify | [top]

> Modify the cluster administrative audit settings

> Input Name | Range | Type | Description
> cli-get |  | boolean optional | Enable auditing of CLI get operations
> cli-set |  | boolean optional | Enable auditing of CLI set operations
> http-get |  | boolean optional | Enable auditing of HTTP get operations
> http-set |  | boolean optional | Enable auditing of HTTP set operations
> ontapi-get |  | boolean optional | Enable auditing of Data ONTAP API get operations
> ontapi-set |  | boolean optional | Enable auditing of Data ONTAP API set operations
> snmp-get |  | boolean optional | Enable auditing of SNMP get operations
> snmp-set |  | boolean optional | Enable auditing of SNMP set operations

> Errno | Description
> EOBJECTNOTFOUND |  |
> EINTERNALERROR |  |

Element definition: audit-info | [top]

> Administrative audit settings of the cluster. When returned as part of the output, all elements of this typedef are reported, unless limited by a set of desired attributes specified by the caller. When used as input to specify desired attributes to return, omitting a given element indicates that it shall not be returned in the output. In contrast, by providing an element (even with no value) the caller ensures that a value for that element will be returned, given that the value can be retrieved. When used as input to specify queries, any element can be omitted in which case the resulting set of objects is not constrained by any specific value of that attribute.

> Name | Range | Type | Description
> cli-get |  | boolean optional | Enable auditing of CLI get operations Attributes: non-creatable, modifiable
> cli-set |  | boolean optional | Enable auditing of CLI set operations Attributes: non-creatable, modifiable
> http-get |  | boolean optional | Enable auditing of HTTP get operations Attributes: non-creatable, modifiable
> http-set |  | boolean optional | Enable auditing of HTTP set operations Attributes: non-creatable, modifiable
> ontapi-get |  | boolean optional | Enable auditing of Data ONTAP API get operations Attributes: non-creatable, modifiable
> ontapi-set |  | boolean optional | Enable auditing of Data ONTAP API set operations Attributes: non-creatable, modifiable
> snmp-get |  | boolean optional | Enable auditing of SNMP get operations Attributes: non-creatable, modifiable
> snmp-set |  | boolean optional | Enable auditing of SNMP set operations Attributes: non-creatable, modifiable