We have an Ontap Select cluster that is monitored via AIQUM. The cluster contains Snaplock volumes (Enterprise). The same message appears in the audit log every 15 minutes for each of the Snaplock volumes.
Tue Aug 06 06:39:04 2024 vmAUTS6-ntp1-01 [kern_audit:info:5413] 8503e80000012757 :: vmAUTS6-ntp1:ontapi :: 10.92.57.28:50590 :: test:admin :: <netapp version='1.15' xmlns='http://www.netapp.com/filer/admin' vfiler='test' nmsdk_version='9.8P7D1' nmsdk_platform='Linux unknown' nmsdk_language='Java'><volume-get-snaplock-attrs><volume>vol_test</volume></volume-get-snaplock-attrs></netapp>^M :: Pending:
Tue Aug 06 06:39:04 2024 vmAUTS6-ntp1-01 [kern_audit:info:5413] 8503e80000012757 :: vmAUTS6-ntp1:ontapi :: 10.92.57.28:50590 :: test:admin :: volume-get-snaplock-attrs :: Success:
Is there a way to deactivate the messages? The audit logs are written to a syslog server, which fills up pretty quickly.
I have already tried making adjustments to the security audit settings, but that didn't help.
