Event ID 1009 — NFS Activity Logging
Applies To: Windows Server 2008 R2
Activity logging enables you to record user activity through Server for Network File System (NFS).
Event Details
Product: | Windows Operating System |
ID: | 1009 |
Source: | NfsServer |
Version: | 6.1 |
Symbolic Name: | EVENT_NFS_AUDIT_LOGFILE_FULL |
Message: | The audit log has reached its maximum file size. Server for NFS has stopped recording audits. Without audit logging, users will still be able to access files through Server for NFS, but their actions will not be recorded. You can clean up the audit log or increase the maximum file size by using the Nfsadmin command-line tool. |
Resolve
Reduce activity log size or use another disk for activity logging
Reduce the activity log size or use another volume for activity logging.
To reduce the activity log size:
- Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
- Type dir to report the amount of free space on the volume.
- Type nfsadmin server config fsize=size, where size is the maximum log file size in MB. The activity log file size provided should be smaller than the amount of free space on the volume.
To use another volume for activity logging:
- Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
- Type nfsadmin server config fname=file, where file is the path and the name of the log file.
Verify
To verify that Server for NFS is properly configured for activity logging:
- Open a command prompt with elevated privileges. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
- Type nfsadmin server.
- Verify that the *Audit Log File Name *field displays the correct location of your log file.