Event ID 1008 — NFS Activity Logging

  • Article

Applies To: Windows Server 2008

Activity logging enables you to record user activity through Server for Network File System (NFS).

Event Details

Product: Windows Operating System
ID: 1008
Source: NfsServer
Version: 6.0
Symbolic Name: EVENT_NFS_AUDIT_LOG_DISK_SPACE_LOW
Message: Server for NFS detected a low disk space condition and has stopped recording audits. Without audit logging, users will still be able to access files through Server for NFS, but their actions will not be recorded. You can free up disk space by deleting any unnecessary files or can use the Nfsadmin command-line tool to record audits to a different volume.

Resolve

Reduce activity log size or use another disk for activity logging

Reduce the activity log size or use another volume for activity logging.

To reduce the activity log size:

  1. Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type dir to report the amount of free space on the volume.
  3. Type nfsadmin server config fsize=size, where size is the maximum log file size in MB. The activity log file size provided should be smaller than the amount of free space on the volume.

To use another volume for activity logging:

  1. Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type nfsadmin server config fname=file, where file is the path and the name of the log file.

Verify

To verify that Server for NFS is properly configured for activity logging:

  1. Open a command prompt with elevated privileges. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type nfsadmin server.
  3. Verify that the *Audit Log File Name *field displays the correct location of your log file.

NFS Activity Logging

File Services