[Samba] using vfs module full_audit: longer history?
Stefan G. Weichinger
lists at xunil.at
Mon Sep 23 12:52:48 UTC 2019
Am 23.09.19 um 12:29 schrieb Stefan G. Weichinger via samba:
>
> A customer asked "who deleted file X?" and I noticed that my current
> setup only gives me about 4 days of log history ...
>
> Debian uses systemd which runs journald, so I know to use journald.conf
> to increase the log file size etc
>
> Any way to specifically increase only the history size for that auditing
> module (and not for all the other systemd units)?
on my way there with some rsyslog-filtering.
More information about the samba
mailing list