Home > Storage > PowerScale (Isilon) > Product Documentation > Security and Compliance > File System Auditing with Dell EMC PowerScale and Dell EMC Common Event Enabler > PowerScale OneFS audit overview
PowerScale OneFS can audit system configuration events, SMB, NFS, and HDFS protocol access events on the PowerScale cluster. All audit data is stored in files called audit topics, which collect log information that can be further processed by auditing tools. System configuration auditing is either enabled or disabled; no additional configuration is required. If configuration auditing is enabled, all configuration events that are handled by the application programming interface (API) are tracked and recorded in the configuration audit topic. Configuration events will not be forwarded to the Dell EMC Common Event Enabler (CEE). SMB, NFS and HDFS protocol events can be audited. If protocol auditing is enabled, file access events through the SMB, NFS, and HDFS are recorded in the protocol audit topic.
The protocol audit topic is consumable by auditing applications that support the Common Event Enabler, which provides integration with auditing applications such as Varonis DatAdvantage, STEALTHbits StealthAUDIT, Veritas Data Insight, and Dell Change Auditor for Dell EMC.