To know the path used for the audit logs in your NetApp storage system run the command below: Log Destination Path: /auditlog Categories of Events to Audit: file-ops, cifs-logon-logoff, Log Rotation S...To know the path used for the audit logs in your NetApp storage system run the command below: Log Destination Path: /auditlog Categories of Events to Audit: file-ops, cifs-logon-logoff, Log Rotation Schedule: Month: January-December Log Rotation Schedule: Day of Week: Sunday-Saturday Log Rotation Schedule: Day: - Log Rotation Schedule: Hour: 12 Log Rotation Schedule: Minute: 30 Then update the path in IBM WinCollect Qradar or other syslog server to integrate and obtain the cifs audit logs.