Can you forward CIFS Auditing to splunk? Last updated Oct 9, 2024 Save as PDF Share Share Tweet Share Views:332Visibility:PublicVotes:0Category:ontap-9Specialty:nasLast Updated:10/9/2024, 11:06:20 AM Applies to ONTAP 9 Splunk Answer ONTAP has no capability to forward CIFS audit events to a third party server, use SMB or NFS to pull the events. Additional Information Clustered Data ONTAP CIFS Auditing Quick Start Guide - PG 12 RFE: CIFS Auditing output to Syslog RFE: need option to produce flat file Audit Log output