How do you send the command audit log on Clustered ONTAP to a remote syslog facility?
On 7mode, we would perform this by adding the following to /etc/syslog.conf:
cmdsaudit.auditlog @<syslog server IP>
On Cmode I've added our syslog server as an event destination. I believe that I need to add an event route, but I can't seem to be able to find any event message names that pertain to the system auditlog.