How can I feed NetApp FAS2020 filer logs to Splunk App for NetApp Data ONTAP

[harshal_chakran]

Hi,
I need to know whether the NetApp FAS2020 filer logs can be fed to Splunk App for NetApp Data ONTAP and how? If not, then which data logs can be fed to it?

Please reply...!!!

[halr9000 · Accepted solution]

The app docs have a page which lists the supported versions. It's not based on your FAS model, but on the version of Data ONTAP firmware which you have installed. If your array doesn't have the required version of Data ONTAP, you can still send syslog alerts from your FAS to Splunk quite easily. That would not require that you install the ONTAP app, but there might be some useful field extractions in the app. Don't expect many of the dashboard panels to work, except for the ones which display syslog data (there's only one or two of those).

If you just wanted to do syslog, here are the docs for that part.