Can you forward CIFS Auditing to splunk? Last updated Save as PDF Share Share Tweet Closure Action:Select an actionApprovedRejectedGuide Link:Select rejection reason:Select a reasonInsufficient informationExisting KB updatedExisting KB availableContent not requiredPlease let us know what is missing:Existing KB Link:Additional Comments:Set the Confidence and Visibility correctly on the Capture Manager.Link the KB article to the Case. If you fail to link, the PAR will be scored as Capture Loss for the case owner. Views:Visibility:PublicVotes:0Category:ontap-9Specialty:nasLast Updated: Applies to ONTAP 9 Splunk Answer ONTAP has no capability to forward CIFS audit events to a third party server, use SMB or NFS to pull the events. Additional Information Clustered Data ONTAP CIFS Auditing Quick Start Guide - PG 12 RFE: CIFS Auditing output to Syslog RFE: need option to produce flat file Audit Log output