An audit log for a DST shadow volume is located in the ._NETWARE directory at the root of the primary volume. For NSS volumes, the default file path for the log is /media/nss/volumename/._NETWARE/volumename.audit.log. All moves between the primary storage area and the secondary storage area are logged as events to the shadow volume’s audit log.
For example, if the primary area is named VOL1, the audit file is /media/nss/VOL1/._NETWARE/VOL1.audit.log.