How to get netstorage activity logs for a particular user account??
there is some basic information in /var/log/apache2/access_log that you can extract. this was discussed a while ago in
Does this cover your needs? if not, what exactly are you looking for?
Hopefully someone else in here has dug deeper in here for any further details, because now I am curious.
Thanks for your response. The shared link definitely gives the idea of gathering some info related to netstorage access. However, I am looking for a little deeper info related to a particular user's activity over netstorage . for eg: user "xyz" who has access rights on some NSS volume "ABC" along with many other users has been accessing thru netstorage portal, what activity has he performed over it!!.
The access_log output gives a raw info related to IP address and Drive location that is being accessed but not related directly with username. Since, the user comes in thru netstorage using public internet, the IP address appears to be only that of firewall without giving any clue of who actually accessed a certain location.
Then what you are looking for is NSS level auditing that has the ability to send this detail to Sentinel (original by NetIQ, now one of Micro Focus's two SIEM products). Unfortunately this has to be setup before hand and isn't all that trivial to do. I ran though this for a client on an OES11 system a few years ago just for one big contract of theirs, and they dropped it once that was done.