Home > Storage > PowerScale (Isilon) > Product Documentation > Security and Compliance > File System Auditing with Dell EMC PowerScale and Dell EMC Common Event Enabler > Appendix B. OneFS to Dell EMC CEE event map
The following table details the translation of the OneFS IO Request Packets (IRPs) to the CEE event types prior to OneFS 8.2.0.
eventType |
File|dir |
CreateResult |
DesiredAccess |
Other |
CEPP_EventType |
Create |
File |
Created |
|
|
CEPP_CREATE_FILE |
Create |
Dir |
Created |
|
|
CEPP_CREATE_DIRECTORY |
Close |
Dir |
|
|
|
CEPP_CLOSE_DIRECTORY |
Close |
File |
|
|
bytesWritten!=0 |
CEPP_CLOSE_MODIFIED
|
Close |
File |
|
|
bytesWritten=0 |
CEPP_CLOSE_UNMODIFIED |
Read |
- |
|
|
|
CEPP_FILE_READ |
Write |
- |
|
|
|
CEPP_FILE_WRITE |
Rename |
File |
|
|
|
CEPP_RENAME_FILE |
Rename |
Dir |
|
|
|
CEPP_RENAME_DIRECTORY |
Delete |
File |
|
|
|
CEPP_DELETE_FILE |
Delete |
Dir |
|
|
|
CEPP_DELETE_DIRECTORY |
setSecurity |
File |
|
|
|
CEPP_SETACL_FILE |
setSecurity |
Dir |
|
|
|
CEPP_SETACL_DIRECTORY |
getSecurity |
|
|
|
|
N/A |
Create |
File |
Opened |
Read, write, append bits clear |
|
CEPP_OPEN_FILE_NOACCESS |
Create |
File |
Opened |
Read bit set |
|
CEPP_OPEN_FILE_READ |
Create |
File |
Opened |
Write bit set |
|
CEPP_OPEN_FILE_WRITE |
Create |
File |
Opened |
Append bit set |
|
CEPP_OPEN_FILE_WRITE |
Create |
Dir |
Opened |
|
|
CEPP_OPEN_DIRECTORY |
|
|
|
|
|
CEPP_SETSEC_FILE |
|
|
|
|
|
CEPP_SETSEC_DIRECTORY |
n/a |
|
|
|
|
CEPP_UNKNOWN |
n/a |
|
|
|
|
CEPP_ALLL |