Can NAS audit logs be forwarded to a syslog server or an external path or email?
Applies to
- ONTAP 9
- Data ONTAP 8 7-Mode
Answer
- NAS audit logs cannot be integrated with the syslog framework, they must be stored in a local path on the system.
- NAS audit events cannot generate email alerts.
- A pull mechanism can be utilized to retrieve them using CIFS or NFS.
- NetApp does not provide a push option to transfer NAS audit logs directly to a destination syslog server.
Additional Information
- NAS auditing - FAQ
- Clustered Data ONTAP CIFS Auditing Quick Start Guide (TR-4189)
- Auditing NAS events on SVMs
- Configuring system event auditing - 7-mode
- ONTAP audit logs can be sent to external syslog server - Manage audit log destinations.