[Samba] human understandable log format?
gaiseric.vandal at gmail.com
Wed May 25 12:53:13 MDT 2011
Can you have hard link or symbolically link one (or more) log files to
I use perl to split up and restructure log file entries- not for the
samba logs tho.
It looks like samba can send messages to syslog. If you use "syslog-ng"
you have a lot of flexibility for logging events based of
host/service/text strings to whatever file(s) you want.
On 05/25/2011 10:29 AM, Andreas Heinlein wrote:
> Am 25.05.2011 15:45, schrieb ion coting:
>> Anyone... help!?
>> On Thu, May 19, 2011 at 4:19 PM, ion coting<ioncoting at gmail.com> wrote:
>>> I would like to look at a logfile containing simple summary lines like
>>> timestamp - client ip - user - action (eg. login, connect to a share) -
>>> result (ok, password wrong, permission denied, io error, etc)
>>> I find log.smb and log.nmb very complicated and smbaudit too; also i would
>>> like to have all this information in a single log gile.
>>> How can I achieve this? Is there any native samba combination of options in
>>> smb.conf that can result in achieving this type of log? Can (and how?) I
>>> configure samba in such a way that some external tools can parse and extract
>>> this information from logfiles?
>>> thank you
> I'd like to see this too, but I don't think it's possible. I have wasted
> several hours when debugging samba problems and dealing with
> hard-to-read logfiles. But there is no way to configure logging except
> for the amount (log level) and destination.
> It may help a bit to use substitutions in the log file destinations, so
> e.g.using "log file = /var/log/samba/log.%I.%U" in your smb.conf will
> create one log file per client and user on the server, like
> /var/log/samba/log.10.0.0.24.bob for user bob on client 10.0.0.24.
> Still, it's sometimes difficult to get actions and results sorted out.
More information about the samba