How to access audit logs?
Applies to
- ONTAP 9
- Auditing
Answer
-
Set log file location to volume in SVM: vserver audit modify
-destination <path>
-
Access by sharing/exporting via CIFS/NFS
-
Access can be restricted with share-level ACLs or through folder- or file-level ACLs and similarly on NFS.
Note: By default, ONTAP converts the binary logs to the EVTX file format.