[Samba] samba and fail2ban

[Hajo Locke]

Hello,

> Maybe have a script running in the background, parsing samba log file to 
> create
> and alternative log file with all related info on the same line for 
> fail2ban...?

but problem will still be the same. How to find lines which belonging 
together?
may be in log we have connect from 3 IPs a, b, c and following 1 successful 
login and 2 false. which ip belongs to the false logins? Every other server 
i know sends this important messages in one line.

Thanks,
Hajo