The Audit Logs Page

Use the Audit Logs page to download logs of file operations performed through the ECP Data Bridge SMB share.

The Audit Logs page provides access to the audit logs generated by the SMB service. These logs are separate from the ECP Data Bridge application logs available through ECP.

SMB audit logs record file and folder operations performed through the ECP Data Bridge network share. Use these logs to review access to files stored locally on the Cloud Connector.

Audit-log information

An SMB audit-log entry can include the following information:

Information	Description
Timestamp	The date and time when the operation occurred.
Username	The ECP Data Bridge account that performed the operation.
Client IP address	The IP address of the system used to access the SMB share.
Share	The SMB share through which the file or folder was accessed.
Action	The operation performed, such as opening, creating, modifying, renaming, or deleting a file or folder.
File name and path	The name and location of the affected file or folder.

The exact information available in an entry can depend on the operation recorded by the SMB service.

Audit-log files

The page includes the active audit log to which new events are being written. When the active log reaches the configured rotation limit, ECP Data Bridge creates a rotated log file and begins writing new events to another active log.

Audit logs are provided as files rather than as individual entries in a table. Download a log file to review its complete contents.

Unique controls and actions

Control or action	Description
Download	Downloads the selected SMB audit-log file for review.

Note:

To review application events and runtime information for ECP Data Bridge, download the application logs through ECP.