Hi,
We are currently evaluating Netapp's 8.3 cluster and we have a requirement to audit the Cluster and SVM administrators. I've been able to enable audting within a SVM but I don't know how to audit the Cluster and SVM admins. For instance, if the Cluster Admin changes the time or if there are multiple failed login attempts for either the Cluster or SVM Admin or if a new SVM is created, etc...
We would like to be able to audit these occurances. If anyone has any ideas on how this can be accomplished and how I can pull this information into a report of some kind. We currently us Splunk to ingest the SVM audits by creating a watch on a directory where Netapp audits are created.
Thanks,
Bruce
