Home > Storage > PowerScale (Isilon) > Product Documentation > Security and Compliance > File System Auditing with Dell EMC PowerScale and Dell EMC Common Event Enabler > Audit log progress
To check the last captured audit event and the event time of the last event that was sent to the CEE server, run the isi audit progress view command to view the forwarder log position of the CEE server.
The command shows the times for the node the command is run on.
A sample output of the isi audit progress view is shown:
Protocol Audit Log Time: Tue Mar 29 13:32:38 2016
Protocol Audit Cee Time: Tue Mar 29 13:32:38 2016
Protocol Audit Syslog Time: Fri Mar 25 17:00:28 2016
The command can be called using isi_for_array to gather the time for all the nodes in the cluster. In addition, the command can be called with --lnn to specify a different node than the command is from.
The following command displays the progress of delivery of the audit events on a node with logical node number 2:
isi audit progress view --lnn=2
The output appears as shown:
Protocol Audit Log Time: Wed Mar 30 16:32:31 2016
Protocol Audit Cee Time: Wed Mar 30 16:32:31 2016
Protocol Audit Syslog Time: Mon Mar 28 19:05:18 2016
Starting in OneFS 8.0.1, the following command allows one to see the oldest unsent protocol audit event for the cluster.
#isi audit progress global view
Protocol Audit Latest Log Time: Fri Sep 2 10:06:36 2016
Protocol Audit Oldest Cee Time: Fri Sep 2 10:02:28 2016
Protocol Audit Oldest Syslog Time: Fri Sep 2 10:02:28 2016