Logging access to SMB shared files (date, time, username, filename)

  • Hi


    Is there any extension / settings to enable SMB log for just this short information: date, time, username, filename ?
    I would like to know who and when accessing the files (for audit / development / security purposes).

    I know there is an audit option and this is possible to play with extraoptions for SMB:


    Code
    full_audit:prefix = %u|%I|%S
    full_audit:success = open, opendir, read, write
    full_audit:failure = none
    full_audit:facility = local7
    full_audit:priority = NOTICE


    Then in the last line of file:

    Code
    sudo nano /etc/rsyslog.conf


    add

    Code
    local7.*    /var/log/samba-audit.log

    and then


    Code
    sudo systemctl restart rsyslog


    And so one, but then inside /var/log/samba-audit.log there is too much and too detailed informations, so it takes a lot of disk space and dhis is difficult to find exact inforrmation,.


    I would like to have a simple where eah next line including only date, time, username, filename.

    How to solve and introduce it in OMV environment ?


    Thank you and best regards

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!