Skip to content

Search-NtfsAuditLogs

SYNOPSIS

Search NTFS audit logs for a specified UNC path.

SYNTAX

Search-NtfsAuditLogs [-unc] <String> [-simple] [<CommonParameters>]

DESCRIPTION

This function searches NTFS audit logs for a specified UNC path using NetApp audit logs via Kibana. It formats the UNC path for querying, validates the path, and generates a Kibana URL to display the audit logs. The function supports both detailed and simplified views of the logs.

EXAMPLES

EXAMPLE 1

Search-NtfsAuditLogs -unc "\\groepgent\data\District09"

Searches the NTFS audit logs for the UNC path "\\groepgent\data\District09" and opens the detailed view in Kibana.

EXAMPLE 2

Search-NtfsAuditLogs -unc "\\groepgent\data\Finance" -simple

Searches the NTFS audit logs for the UNC path "\\groepgent\data\Finance" and opens the simplified view in Kibana.

PARAMETERS

-unc

The UNC path to search in the NTFS audit logs.

Type: String
Parameter Sets: (All)
Aliases:

Required: True
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-simple

A switch to generate a simplified view of the audit logs.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES