EMSは毎日auditlog.change.detectedを報告します
環境
- ONTAPにはCONTAP-352417の修正が含まれています
- AFFシステム
問題
- EMSは毎日auditlog.change.detectedを報告します
Sat Oct 17 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
Sun Oct 18 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
Mon Oct 19 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
Tue Oct 20 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
Wed Oct 21 00:05:00 [node01: mgwd: auditlog.change.detected:error]: Audit log file "audit.log.0000000008" was tampered with.
- MGWDのログによると、影響を受ける監査ログファイルで署名検証が失敗していることがわかります。
Fri Oct 17 2026 00:05:00 [kern_mgwd:info:4036] 0x82bf8ea00: 86ffff0000000021: ERR: tables::audit: DigestVerifyFinal failed.Line:1673, Function:verifySign
Fri Oct 17 2026 00:05:00 [kern_mgwd:info:4036] 0x82bf8ea00: 86ffff0000000021: ERR: tables::audit: verify_hashes:src/tables/mhost_audit/audit.cc:1571Signatureverification failed for file: audit.log.0000000008