[Samba] human understandable log format?

[Gaiseric Vandal]

Can you have hard link or symbolically link one (or more) log files to 
another?

I use perl to split up and restructure log file entries-  not for the 
samba logs tho.

It looks like samba can send messages to syslog.  If you use "syslog-ng" 
you have a lot of flexibility for logging events based of 
host/service/text strings to whatever file(s) you want.


On 05/25/2011 10:29 AM, Andreas Heinlein wrote:
> Am 25.05.2011 15:45, schrieb ion coting:
>> Anyone... help!?
>>
>> On Thu, May 19, 2011 at 4:19 PM, ion coting<ioncoting at gmail.com>  wrote:
>>
>>> Hi,
>>> I would like to look at a logfile containing simple summary lines like
>>> this:
>>>
>>> timestamp - client ip - user - action (eg. login, connect to a share) -
>>> result (ok, password wrong, permission denied, io error, etc)
>>>
>>> I find log.smb and log.nmb very complicated and smbaudit too; also i would
>>> like to have all this information in a single log gile.
>>>
>>> How can I achieve this? Is there any native samba combination of options in
>>> smb.conf that can result in achieving this type of log? Can (and how?) I
>>> configure samba in such a way that some external tools can parse and extract
>>> this information from logfiles?
>>>
>>> thank you
>>>
>>>
> I'd like to see this too, but I don't think it's possible. I have wasted
> several hours when debugging samba problems and dealing with
> hard-to-read logfiles. But there is no way to configure logging except
> for the amount (log level) and destination.
>
> It may help a bit to use substitutions in the log file destinations, so
> e.g.using "log file = /var/log/samba/log.%I.%U" in your smb.conf will
> create one log file per client and user on the server, like
> /var/log/samba/log.10.0.0.24.bob for user bob on client 10.0.0.24.
> Still, it's sometimes difficult to get actions and results sorted out.
>
> Bye,
> Andreas