stray solstice
Is there any way I can explicitly mention ONTAP to send the audit logs via cluster-mgmt lif and syslog via node-mgmt.
When the node-mgmt and cluster-mgmt lif is hosted on the node, cluster-mgmt takes care of both audit log and syslog.
All I need is cluster-mgmt to send audit logs and node-mgmt to send the syslogs
somber minnow
Take a look at LIF Service Policies, especially if you're on ONTAP 9.12.1 or later.
https://docs.netapp.com/us-en/ontap/networking/lifs_and_service_policies96.html#service-policies-for-system-svms
Beginning with ONTAP 9.12.1, you can use the management-log-forwarding service to control which LIFs are used to forward audit logs to a remote syslog server.
