|
APIs in Category: audit |
Cluster-Mode API version 1.15 |
audit-get |
APIs for managing administrative audit settings for the cluster. Audit logging can be enabled/disabled separately for 'set' (read-write) requests and 'get' (read-only) requests, for each of the following access modes: CLI (Command-Line Interface), HTTP, SNMP and the Data ONTAP API (ONTAPI, ZAPI). The state of these flags is represented via the audit-info typedef. |
| audit-get | [top] |
Get the cluster administrative audit settings
Input Name Range Type Description desired-attributes audit-info
optional
Specify the attributes that should be returned. If not present, all attributes for which information is available will be returned. If present, only the desired attributes for which information is available will be returned. Output Name Range Type Description attributes audit-info
The attributes of the audit.
Errno Description EOBJECTNOTFOUND EINTERNALERROR
| audit-modify | [top] |
Modify the cluster administrative audit settings
Input Name Range Type Description cli-get boolean
optional
Enable auditing of CLI get operations cli-set boolean
optional
Enable auditing of CLI set operations http-get boolean
optional
Enable auditing of HTTP get operations http-set boolean
optional
Enable auditing of HTTP set operations ontapi-get boolean
optional
Enable auditing of Data ONTAP API get operations ontapi-set boolean
optional
Enable auditing of Data ONTAP API set operations snmp-get boolean
optional
Enable auditing of SNMP get operations snmp-set boolean
optional
Enable auditing of SNMP set operations
Errno Description EOBJECTNOTFOUND EINTERNALERROR
| Element definition: audit-info | [top] |
Administrative audit settings of the cluster. When returned as part of the output, all elements of this typedef are reported, unless limited by a set of desired attributes specified by the caller. When used as input to specify desired attributes to return, omitting a given element indicates that it shall not be returned in the output. In contrast, by providing an element (even with no value) the caller ensures that a value for that element will be returned, given that the value can be retrieved.
When used as input to specify queries, any element can be omitted in which case the resulting set of objects is not constrained by any specific value of that attribute.
Name Range Type Description cli-get boolean
optional
Enable auditing of CLI get operations Attributes: non-creatable, modifiable cli-set boolean
optional
Enable auditing of CLI set operations Attributes: non-creatable, modifiable http-get boolean
optional
Enable auditing of HTTP get operations Attributes: non-creatable, modifiable http-set boolean
optional
Enable auditing of HTTP set operations Attributes: non-creatable, modifiable ontapi-get boolean
optional
Enable auditing of Data ONTAP API get operations Attributes: non-creatable, modifiable ontapi-set boolean
optional
Enable auditing of Data ONTAP API set operations Attributes: non-creatable, modifiable snmp-get boolean
optional
Enable auditing of SNMP get operations Attributes: non-creatable, modifiable snmp-set boolean
optional
Enable auditing of SNMP set operations Attributes: non-creatable, modifiable