@strive just converted it 🙂 @manuzet if strive's answer solved your question, please be sure to accept it by clicking on the big check mark to the left of this thread. That way people with similar questions/issues will turn to this post for help. Thanks! Patrick ... View more

The CEE TA shouldn't be used with Isilon. Isilon supports sending audit logs directly to syslog. Search for the Isilon add-on and app in splunkbase and install that. There are also instructions on how to configure the cluster to send the logs to a syslog server. ... View more