File Access Manager Missing Events
We have EMC Isilon File Server with large number of SMB events . On one of the shared folder logs I see only Read Events but windows timestamp show few sub-folders were created. Is there any way to verify that I am receiving all the events ? As Isilon native logging is not easy to filter it is difficult to get a copy from Isilon to compare against the FAM logs. I can simulate the events and see if they are captured on FAM but I want to possibly do it periodically to see if I am receiving all events.