[Samba] full_audit question

fk+samba at celebrate.de fk+samba at celebrate.de
Wed Jan 27 10:01:14 UTC 2021

Hello there,

I'm looking for a way, to get only logs when a file was open for write.

At the moment, full_audit:success = open produces:

|open|ok|r| too. But I do need the |open|ok|w| only.

Is there a way to get the entries with |w| only ?

Thanks, Frank

More information about the samba mailing list