[Samba] Logging successful log-ins

Christopher Wensink cwensink at five-star-plastics.com
Wed Sep 16 18:21:16 UTC 2020

You could set up an ELK stack, (elsticsearch, logstash, kibana) This is 
something I'm learning about in the Linux in the real world course on 
Linux training academy


On 9/16/2020 11:46 AM, Piers Kittel via samba wrote:
> Hi all,
> Due to a security breach at my office recently, we need to log 
> successful / failed log-ins.  I've put in "log level = 3" in smb.conf 
> on our active directory domain controller which seems to log what we 
> need, however this is generating massive log files, due to it logging 
> every file opening/closing by all users.  How do I log 
> successful/failed log-ins without having to generate massive files?  
> Would it be possible to output just the successful/failed log-ins into 
> its own log file?
> Many thanks for help in advance!
> Regards - Piers

Christopher Wensink
IS Administrator
Five Star Plastics, Inc
1339 Continental Drive
Eau Claire, WI 54701
Office:  715-831-1682
Mobile:  715-563-3112
Fax:  715-831-6075
cwensink at five-star-plastics.com

More information about the samba mailing list