jk at zg.cz
Tue Apr 25 04:43:20 GMT 2006
> By the way the output messages generated by full_audit look
> like formatted in some manner that tokens are separated with
> '|'(pipe). Is it designed for some parser that's already been
> used somewhere?
> I'd like to have output messages more readable form like:
> smbd_audit: opendir("My Document"): result="success" user="nobody"
> host=192.168.234.1 ...
Audit logs are usually quite large and with this method you will
increase their size by some 40% of dead weight. While you could
have a simple perl script filter to display them just as you like:
printf <<EOS, split /\|/;
smbd_audit: %s(%s): result="%s" user="%s" host="%s"
Jiri Klouda <jk at zg.cz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 191 bytes
Desc: Digital signature
Url : http://lists.samba.org/archive/samba-technical/attachments/20060424/7c0b0664/attachment.bin
More information about the samba-technical