Can you forward CIFS Auditing to splunk? Last updated Save as PDF Share Share Tweet Share Views:236Visibility:PublicVotes:0Category:ontap-9Specialty:nasLast Updated: Applies to ONTAP 9 Splunk Answer ONTAP has no capability to forward CIFS audit events to a third party server, use SMB or NFS to pull the events. Additional Information Clustered Data ONTAP CIFS Auditing Quick Start Guide - PG 12 RFE: CIFS Auditing output to Syslog RFE: need option to produce flat file Audit Log output