In Clustered Data ONTAP 8.x and ONTAP 9 there are multiple log files. If you plan to review logs, the good place to start is EMS log file. The Event Management System (EMS) collects events that are noticed by ONTAP. It also provides filtering mechanism for easy review. EMS events can be viewed from the clustershell – You can review node’s log by executing command
cluster1::> event log show
This command will print all events from the newest ones to the oldest from the current period (last 4000 events). You can also specify a date range or time for the events, for example to print all events from last 10 minutes:
cluster1::> event log show -time >10m