View audit reports
(NetScaler Console) allows you to view and download the configuration audit diff report in the configuration audit section. The configuration audit section allows you to export the:
-
Summary report across all instances per instance
-
Granular differential (diff) report for each instance-template pair
The audit templates in Audit Templates run at the scheduled time against the configurations in the specified instances. The NetScaler Config Drift chart on the Configuration Audit dashboard displays high-level details about configuration changes in saved against unsaved configurations. When you click the NetScaler Config Drift chart, the ensuing Audit Reports page displays a list of instances that shows both "Diff Exists" and No Diff." You can download the diff reports displayed by NetScaler Console.
NetScaler Console also provides an option to schedule automatic export of a diff report as a mail attachment.
To export configuration audit reports:
-
In NetScaler Console, navigate to Infrastructure > Configuration > Configuration Audit.
-
On the Configuration Audit page, click inside the NetScaler® Config Drift chart.
-
The Audit Reports page lists instances that have a difference. The page also displays a list of instances that does not have any difference in their running configurations.
In the image you can see that for some instances a diff is present only in Saved Vs Running Diff and for some instances, a diff is present only in Template vs Running Diff. For some instances, differences exist in both Saved Vs Running Diff and Template vs Running Diff.
Related information
Saved Vs Running Diff
You can view a report of the diff between the configuration saved on the instance and the configuration that is currently running on the instance.
-
Click Diff Exists for an instance under Saved Vs Running Diff.
You can view the report for saved configuration against running configuration diff for that instance. -
Click Export diff report to download a .csv file of the diff report. You can also click Export corrective commands to export the commands to a .txt file. You can then run the commands on the associated NetScaler Console instance from Configuration Jobs to correct the configuration in that instance.
Template vs Running Diff
The Template vs Running Diff includes all templates other than Saved Vs Running Diff which is the default template. You can view the difference that exists between the template and the running configuration.
-
Click Diff Exists for one of the instances under Template vs Running Diff.
-
The templates reveal the differences when the NetScaler Console instance deviates from the configuration specified by the template.
-
Click Diff Exists again. The following image shows the configuration that the template is looking for, the running configurations, and the correction configurations or the commands to run to correct the configuration. If the Running Configuration is blank, it means either that commands are not configured or are removed.
-
Click Export diff report to download a .csv file of the diff report. You can also click Export corrective commands to export the commands to a .txt file. You can then run the commands in CLI to correct the configuration in the instance.
You can also use Template vs Running and Running vs template drift setting, to compare the configuration from both ways:
-
Compares the audit template configuration with the running configuration on the instance.
-
Compares the running configuration on the instance with the audit template.
By default, the Template vs. Running drift setting is selected. To modify the drift setting, select Settings in the Configuration Audit page.
View the file status audit reports
Use the NetScaler File Status chart to monitor if any files are added to, modified, or removed from the
nsconfig folder. For example, if the license file is updated on an NetScaler instance, you can check when this file was last updated and take the required actions.
-
Navigate to Infrastructure > Configuration > Configuration Audit.
-
In the Configuration Audit page, click the NetScaler Config File Status chart.The Audit Reports page lists instances with the Diff status.The Diff Status is calculated for the interval between the Previous Polled Time to the Latest Polled Time. The Diff Status can be one of the following:
-
Diff exists - This status indicates that the files have changed in the
nsconfigfolder of an instance since the Previous Polled Time. To view what has changed on the file, click Diff Exists.
-
No Diff - This status indicates the files in the
nsconfigfolder hasn't changed since the previous polled time. -
NA - This status indicates that monitoring the file status is not applicable. This status appears when the NetScaler Console doesn't poll the instance. For example, when an instance is added newly or an instance state is inactive the polling of the instance doesn't occur.
-
Exclude files from Config Audit
You can exclude specific files from Config Audit so that they are not monitored for change. Use exclusions for system-generated or frequently updated files (for example, files that change daily) to reduce noise and avoid false positives in audit results.
Examples for file name (or relative path) to exclude from Config Audit file diff:
-
Valid file name (or relative path)
-
ns.conf,ssl/ns.cert
-
-
Invalid file name (or relative path)
-
/ns.txt,\nsconfig\ns.conf(Excluded file name must be a relative path) -
ñs.conf(Excluded file name must contain only ASCII characters) -
C:/nsconfig/ns.conf(Excluded file name must not use drive-letter paths) -
ssl/../../ns.conf(Excluded file name must not contain parent-directory traversal..)
-
To exclude files from Config Audit, perform the following steps:
-
Navigate to Infrastructure > Configuration > Configuration Audit.
-
Select Settings.
-
Under NetScaler Config File Settings, add the file paths you want to exclude from auditing.
-
Click Save.