Is there a possibility to forward the CIFS audit logs to Splunk? I know NetApp does not have a capability to send the logs to Splunk.
i have tried couple of options like making a hard link of audit logs share in windows server as a folder and tried to forward from there to Splunk but the result was negative. Splunk is unable to pull the logs.
Tried with NFS as well but the result remain same.
Can someone help me if there are any options to try?