Splunk Advanced Web Reporting for the Cisco IronPort S-Series with NetApp Storage

[henpham]

I'm looking to install Splunk Advanced Web Reporting for the Cisco IronPort S-Series on a UCS rack mount server. However, I also have a NetApp FAS 3170. Will this software support the external NetApp storage or is local storage my only option? If so, would this be an automated process? Can someone describe how this looks like or how this would work?

[mcintosh]

NetApp supports syslog. Just create or edit /etc/syslog.conf (see the Ontap admin guide for content of the file), enter the ip of your Splunk server. It works great.