[Samba] splitting/duplicating log files - how?
rpenny at samba.org
Tue Oct 15 16:28:16 UTC 2019
On 15/10/2019 16:56, Rowland penny via samba wrote:
> On 15/10/2019 16:22, lejeczek via samba wrote:
>> On 15/10/2019 10:54, Rowland penny via samba wrote:
>>> On 15/10/2019 10:29, lejeczek via samba wrote:
>>>> hi everyone
>>>> I'd like to ask, with having basic logging in config as here:
>>>> log file = /var/log/samba/log.%m
>>>> max log size = 5000
>>>> log level = 1 auth:3 tdb:5 passdb:3 sam:3 winbind:0 idmap:3
>>>> log files get populated on per-machine basis.
>>>> Would it be possible to put all authentication into one separate file
>>>> many thanks, L.
>>> Never felt the need to do it myself, but smb.conf says this under 'log
>>> To configure the logging for specific classes to go into a different
>>> file then log file, you can append @PATH to the class, eg log level =
>>> 1 full_audit:1@/var/log/audit.log.
>> For some reason @$a_path does not work me(Version 4.9.1), the file does
>> not get created.
>> I think I can see an effect of auth_audit as more details go into the
>> logs now with 'log level = 1 auth_audit:2@/var/log/samba/auth.log, like
>> IPs which were not there before, eg.:
>> Oct 15 16:12:00 swi smbd: Auth: [SMB2,(null)] user
>> [NNR_BI\[mee] at [Tue, 15 Oct 2019 16:12:00.610569 BST] with [NTLMv2]
>> status [NT_STATUS_WRONG_PASSWORD] workstation [NNRDC] remote host
>> [ipv4:10.5.5.202:36784] mapped to [NNR_BI\[mee]. local host
>> but no /var/log/samba/auth.log
>> many thanks, L.
> Strange, I tried your log level line on a DC and the log file was
> created but without content, I had to raise the '2' to '3', at which
> point I got lines similar to yours when I connected to a share with
The reason why it works for myself but not Lejeczek is that I am using
4.10.8 and he isn't ;-)
It looks like the ability to put the log output into different logfiles
came in at 4.10.0
More information about the samba