Syslog Server Route get to the syslog server indicates that the traffic is being delivered from Cluster/Node management as expected From the syslog server it is reported as coming from the intercluste...Syslog Server Route get to the syslog server indicates that the traffic is being delivered from Cluster/Node management as expected From the syslog server it is reported as coming from the intercluster LIF IP Dec 6 13:23:05 (Intercluster IP) [netapp01-a01:wafl.vol.snap_create.done:info]: type="Volume", owner="", vol="CustomerFiles", app="", volident="@vserver:111a01a1-a111-11aa-aa11-a111aa1a11a1", run_time="1111111" Cluster Log forwarding shows forwarding to Syslog Server: