ONTAP Discussions

Send cDOT auditlog to remote syslog server

bjones_ea
24,261 Views

How do you send the command audit log on Clustered ONTAP to a remote syslog facility?

 

On 7mode, we would perform this by adding the following to /etc/syslog.conf:

cmdsaudit.auditlog                      @<syslog server IP>

On Cmode I've added our syslog server as an event destination.  I believe that I need to add an event route, but I can't seem to be able to find any event message names that pertain to the system auditlog.

11 REPLIES 11
Public