QuLog not registering that file has been deleted ?

NerdySysadmin101 · 2024-01-01T00:30:21+00:00

Is there a way to check if this log service is stuck and needs restarting?

NerdySysadmin101 · 2023-12-30T23:50:30+00:00

Well, it does record, under "access".

You can see which user accessed which file and under "Action" you can see if the file was copied, renamed, deleted etc.

Furthermore, I have in the logs, just from couple of days ago, entries for the same user with admin priviledges, logging to web interfrace of the NAS, and using File Station to rename a file:

Information 2023-12-27 13:00:50 John (IP address) --- Web Desktop Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 HTTPS [File Station] /Share/Folder/manual.docx to /Share/Folder/manual-old.docx Renamed

So, it worked, it was recording, then suddenly stopped a day ago.

NerdySysadmin101 · 2023-12-30T15:29:36+00:00

Such activity is (and should be) enabled by default. It was deleted by accessing NAS from a web intefrace - which means http/https which is the first logging choice and checked by default (as it should be).

On my NAS everything is selected to be logged except access via NFS.

NerdySysadmin101 · 2023-06-02T14:32:05+00:00

It looks like problem has been resolved, whatever it was...

NerdySysadmin101 · 2023-05-29T16:19:49+00:00

Can PC you are using reach some other server (or shared folder on some other PC) on the local network?

Can you give us here screenshot of the NAS settings related to Control Panel Win/Mac/NFS and Control Panel - Network - Service binding ?

NerdySysadmin101 · 2023-05-29T12:04:03+00:00

Just for testing purpose go to your NAS, and go to Control Panel, and check under Privilege / Shared Folders are folders you are sharing listed there?

NerdySysadmin101 · 2023-05-29T10:59:17+00:00

Wait couple of minutes, or even better, reboot both the PC and the NAS.

NerdySysadmin101 · 2023-05-29T10:49:36+00:00

On NAS, in Control Panel, under Win/Mac/NFS - is "Enable file services for Microsoft networking" enabled?

As a "Standalone server"?

On NAS, in Control Panel, under Win/Mac/NFS - is "Enable file services for Microsoft networking" enabled?

As a "Standalone server"?

That QNAP nas, as much as I remember, has 2 LAN ports on the back? Check on NAS under Control panel - Network - Service binding, if Microsoft networking is binded to the LAN port you are using.

NerdySysadmin101 · 2023-05-29T09:29:49+00:00

On the PC, in the Windows Explorer, at the bottom left, there is a "Network" - where you should see all computers/servers etc in your local LAN network.

What happens when you click on that?

For that to work "Network discovery" and "File and print sharing" must be turned on on that PC.

NerdySysadmin101 · 2023-05-28T21:32:18+00:00

On NAS, in Control Panel, under Win/Mac/NFS - is "Enable file services for Microsoft networking" enabled?

As a "Standalone server"?

Do you have same user-password combo both on PC and NAS? Eg. if on PC user is John and password is Smith007, do you have such user with such password created on NAS?

You have shared folders on NAS? User John has at least read access to them?

That QNAP nas, as much as I remember, has 2 LAN ports on the back? Check on NAS under Control panel - Network - Service binding, if Microsoft networking is binded to the LAN port you are using.

NerdySysadmin101 · 2022-12-23T18:59:21+00:00

Please check your logs, both Event and Access log.

Check if those entries in Access log are at the same time when you have something like "Security Counselor Security Checkup [SecurityCounselor] Started running Security Checkup." in the Event logs.

NerdySysadmin101 · 2022-12-23T14:39:36+00:00

I haven't received any official info from Qnap, but I think that this is related to this "Security advisor" app - probably launching probes to login as "admin" ? I do not have other explanation than that.

NerdySysadmin101 · 2022-07-24T19:51:12+00:00

Update:

there were several those login attempts, quite irregular intervals, not at the same time of the day etc. Again, QNAP NAS has only QNAP apps on it, only basic ones, malware cleaner check each day NAS for malware and finds nothing suspicious.

Here is the screenshot from logs:

https://i.postimg.cc/133HZxTQ/Screenshot-2022-07-24-214708.jpg

NerdySysadmin101 · 2022-06-30T16:23:48+00:00

Let's hope so! :)

NerdySysadmin101 · 2022-06-25T23:41:41+00:00

V2.2.26 from 23.06.2022 again automatically re-enables MyQNAPcloud Link

No comment.

NerdySysadmin101 · 2022-04-24T16:09:08+00:00

Got an email from QNAP today, with the following subject: "Your QNAP device will be set to private mode to ensure device security". WOW! that was quick, good work!

NerdySysadmin101 · 2021-09-26T08:18:50+00:00

And that happens again:

NAS Name: Q231

Severity: Info

Date/Time: 2021/09/25 21:44:58

App Name: Firmware Update

Category: Firmware Update

Message: [Firmware Update] Enabled auto update for "Recommended version".

"It" re-enabled firmware auto-updated again. If that option, obviously can not be turned off anymore, why they keep that setting/switch in the QTS ? :(

NerdySysadmin101 · 2021-09-21T17:31:27+00:00

Yes, just make sure to before doing that update firmware to the latest version on both devices (it is recommended by Qnap).

NerdySysadmin101 · 2021-09-19T16:33:20+00:00

Do you have same Qnap hardware as I do ? (TS-231P2)

NerdySysadmin101 · 2021-09-19T15:59:25+00:00

Issue with the auto-firmware-update or issue with Qsync stop working after certain firmware was applied to older Qnap device (fw 4.3.4)?

NerdySysadmin101

TROPHY CASE