Hello, I am not sure it's possible to create an XML file from the cifs audit file. There is an internal process that converts the cifsaudit.alf log file to .evt. Even the options cifs.audit.saveas command must use the .evt extension.
Thanks for the quick responce. I don't seem to find anything configurable too, but was hoping others have some other idea that is usefull. Thank you anyway.