Save audit samba audit logs in seperate files

  • Is it possible in the system to write audit logs in separate files that can be exported in a script to the ftp statistics server.

    I can see audit log records only in syslog, but files in sabma logs have 0 size.

    Best Regards, Evhenii

  • No, there is no way to write the audit logs to a seperate file, but you can use journalctl to export the data manually, e.g. by running a cron job.

    journalctl --quiet --no-pager --priority='notice' --identifier='smbd_audit' --output=short

  • Thanks.

    I solve this another way.

    I add this line in /etc/rsyslog.conf

    local7.notice -/var/log/samba/log.audit

    And export daily files in ftp server by cron.

    After export i clean log.audit

    truncate /var/log/samba/log.audit --size 0

    Best Regards, Evhenii

  • votdev

    Added the Label OMV 5.x
  • votdev

    Added the Label resolved

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!