Fields of NAS access logs collected by Simple Log Service - File Storage NAS

Describes the log fields of File Storage NAS (NAS) access logs collected by Simple Log Service.

General-purpose NAS file systems

NFS

The logs of a file system that uses Network File System (NFS) are stored in a Logstore named nas-nfs. The following table describes the log fields.

Field	Description
__topic__	The topic of the log. The value is fixed as `nas_audit_log`.
ArgIno	The inode number of the file system. For example: `12345678`.
AuthRc	The authorization return code. `0` indicates success. For example: `0`.
NFSProtocolRc	The NFS return code. `0` indicates success. For example: `0`.
OpList	The procedure number of NFSv4. For example: `18`.
Proc	The procedure number of NFSv3. For example: `6`.
RWSize	The size of read and write data, in bytes. For example: `4096`.
RequestId	The request ID. For example: `5F2D8A1B3C4E6F7A`.
ResIno	The inode number of the lookup resource. For example: `87654321`.
SourceIp	The IP address of the client. For example: `192.168.0.10`.
User	The Alibaba Cloud account ID. For example: `1234567890123456`.
Vers	The NFS protocol version. For example: `3` or `4`.
Vip	The IP address of Simple Log Service. For example: `100.100.0.1`.
Volume	The file system ID. For example: `0addcfe549`.
microtime	The time when the request was initiated, in microseconds. For example: `1678886400123456`.

SMB

The logs of a file system that uses Server Message Block (SMB) are stored in a Logstore named nas-smb-access-log. The following table describes the log fields.

Field	Description
OpName	The request name. For example: `Read`.
Host	The IP address of the client. For example: `192.168.0.20`.
ArrivalTime	The time when the request was received, in microseconds. For example: `1678886400123456`.
CompleteTime	The time when the request was completed, in microseconds. For example: `1678886400124000`.
ConnID	The connection ID. For example: `1001`.
Inode	The inode number of the resource object. For example: `12345678`.
ObjectName	The full path of the resource object. For example: `/share/docs/report.pdf`.
RequestID	The request ID. For example: `A1B2C3D4E5F60001`.
PersistentID	The persistent ID of the file handle. For example: `0000000000000001`.
SessionID	The session ID. For example: `2000`.
VolumeID	The file system ID. For example: `0addcfe549`.
UserID	The Alibaba Cloud account ID. For example: `1234567890123456`.
UserSID	The security identifier (SID) of the Active Directory (AD) user. For example: `S-1-5-21-3623811015-1111111111-1111111111-1001`.
UserSName	The username. For example: `DOMAIN\alice`.
IOBytes	The size of I/O data, in bytes. For example: `8192`.
Opcode	The SMB protocol operation code. For example: `8`.
Status	The response status. For example: `0` (success) or `0xC0000022` (access denied).
TotalTime	The time to process the request, in milliseconds. For example: `2`.

Extreme NAS file systems

The logs of an Extreme NAS file system are stored in a Logstore named nas-extreme-nfs. The following table describes the log fields.

Field	Description
ArgIno	The inode number of the file system. For example: `12345678`.
AuthRc	The authorization return code. `0` indicates success. For example: `0`.
NFSProtocolRc	The NFS return code. `0` indicates success. For example: `0`.
Proc	The procedure number of NFSv3. For example: `6`.
RWSize	The size of read and write data, in bytes. For example: `4096`.
Rc	The request return code. `0` indicates success. For example: `0`.
Reslno	The inode number of the lookup resource. For example: `87654321`.
Sourcelp	The IP address of the client. For example: `192.168.0.10`.
User	The Alibaba Cloud account ID. For example: `1234567890123456`.
Vers	The NFS protocol version. For example: `3`.
Volume	The file system ID. For example: `0addcfe549`.