You can use the cifs audit save command to update the event log manually.
About this task
You do not have to manually save audit events after executing the
cifs audit clear command; in this case, Data ONTAP saves audit events automatically.
Step
- Enter the following command to update the event log: cifs audit save [-f]
The -f option allows you to overwrite the existing event log. If the event log does not exist, you can omit the -f option.
Result
Data ONTAP writes to the event log the event information gathered since the last event log update.