Deepak Singh
Dabbler
- Joined
- Jun 6, 2016
- Messages
- 16
Dear Members,
I am using freenas 11 and successfully configured the full Samba audit and getting the logs as well, we are running graylog server for centralise log monitoring.
I have configured the remote logging configuration in syslog and freenas is sending the logs to our graylog server apart from samba audit logs.
i.e. Everything is logged apart from samba audit logs.
Please see the below screenshot for freenas config page.
Below is my syslog-ng configuration for samba audit logs.
Please let me know what is wrong here, as we want samba logs also to be stored in graylog server.
I am using freenas 11 and successfully configured the full Samba audit and getting the logs as well, we are running graylog server for centralise log monitoring.
I have configured the remote logging configuration in syslog and freenas is sending the logs to our graylog server apart from samba audit logs.
i.e. Everything is logged apart from samba audit logs.
Please see the below screenshot for freenas config page.
Below is my syslog-ng configuration for samba audit logs.
destination m_samba_audit { file("/mnt/ie/logs/smb/smb.log"); };
log { source(src); filter(f_local5); destination(m_samba_audit); flags(final); $
destination loghost { udp("192.168.3.42" port(5514) localport(514)); };
log { source(src); filter(f_info); destination(loghost); };
Please let me know what is wrong here, as we want samba logs also to be stored in graylog server.