https://community.splunk.com/t5/Getting-Data-In/Monitoring-file-changes-to-a-NetApp-file-share/m-p/532844#M89552 <P>Hello,</P><P>New to Splunk.&nbsp; Can Splunk monitor or audit changes to a Netapp file share?&nbsp; We would like to know about file or folder deletions, moves on those shares, etc.&nbsp; I have installed and configured the ONTAP add-on and application and have data in.</P><P>Additionally, I am trying to convert my WinEventLog:Application logs to a metrics index, but want to retain the event data from this sourcetype as well.&nbsp; Is it possible to have both?&nbsp; Will this affect my license usage if I am sending the same data to both a metrics index and an event index?</P><P>&nbsp;</P><P>Thank you&nbsp;&nbsp;</P> Fri, 11 Dec 2020 16:17:30 GMT JPrictoe 2020-12-11T16:17:30Z https://community.splunk.com/t5/Getting-Data-In/Monitoring-file-changes-to-a-NetApp-file-share/m-p/532844#M89552 <P>Hello,</P><P>New to Splunk.&nbsp; Can Splunk monitor or audit changes to a Netapp file share?&nbsp; We would like to know about file or folder deletions, moves on those shares, etc.&nbsp; I have installed and configured the ONTAP add-on and application and have data in.</P><P>Additionally, I am trying to convert my WinEventLog:Application logs to a metrics index, but want to retain the event data from this sourcetype as well.&nbsp; Is it possible to have both?&nbsp; Will this affect my license usage if I am sending the same data to both a metrics index and an event index?</P><P>&nbsp;</P><P>Thank you&nbsp;&nbsp;</P> Fri, 11 Dec 2020 16:17:30 GMT https://community.splunk.com/t5/Getting-Data-In/Monitoring-file-changes-to-a-NetApp-file-share/m-p/532844#M89552 JPrictoe 2020-12-11T16:17:30Z https://community.splunk.com/t5/Getting-Data-In/Monitoring-file-changes-to-a-NetApp-file-share/m-p/532871#M89554 This really should be two postings. Fri, 11 Dec 2020 20:18:40 GMT https://community.splunk.com/t5/Getting-Data-In/Monitoring-file-changes-to-a-NetApp-file-share/m-p/532871#M89554 richgalloway 2020-12-11T20:18:40Z