[Samba] Multiple Log Entries for the Same Operation

[Selahattin CILEK]

I am running *Samba 4.13* on *FreeBSD 14*, along with *Syslog-NG v4.4*.

I have these lines in the *[global]* section of my configuration file:

     full_audit:prefix = %U|%I|%m|%S
     full_audit:success = connect mkdirat renameat create_file sendfile 
open close unlinkat streaminfo
     full_audit:failure = none
     full_audit:facility = local7
     full_audit:priority = NOTICE

And when I open a file, I see two consecutive lines for the same operation:

2024-02-13T23:21:14.553971+03:00 nas.abc.com smbd_audit 8416 - - 
someuser|192.168.1.2|somehost|someshare|create_file|ok|0x80|file|open|/tank/someshare/somefile.jpg
2024-02-13T23:21:14.665831+03:00 nas.abc.comsmbd_audit 8416 - - 
someuser|192.168.1.2|somehost|someshare|create_file|ok|0x80|file|open|/tank/someshare/somefile.jpg

Why does that happen? Is there anything I can do to prevent this?





-- 
This email has been checked for viruses by Avast antivirus software.
www.avast.com