Does anyone know if we capture successful logins and if so where can I find them? They don't seem to go into EMS logs (only unsuccessful) and I had a look at the node audit.log and they don't seem to be there either. Any ideas?
#Audit Successful logins
full flume
wide ember
if not mistaken you have to use log destinations
https://docs.netapp.com/us-en/ontap/system-admin/forward-command-history-log-file-destination-task.html
https://docs.netapp.com/us-en/ontap/system-admin/audit-display-log-contents-task.html
teal ivy
You can simply use security audit log show if you want to check on your cluster.