We only log the SID to the auditlogs, you can look up the user using the SID from OneFS cli.  An example would be  isi auth user view --sid S-1-5-21-1697584843-1624307931-1882880181-1104
I have a set of aditlog at Isilon.  Isilon and Activedirectory we have cooperation.  OneFS is 7.1.   user name auditlog are written in SID.  Is there a way to write the user name of ActiveDirectory this?
how to display the user name of auditlog