The truenas scale can't use full_audit

[akong]

Hello,
I want use full_audit.I set follow settings to smb service.

full_audit:prefix=%u|%I|%m|%S
full_audit:failure=connect
full_audit:success=mkdir rmdir write pwrite sendfile rename unlink
full_audit:facility=LOCAL5
full_audit:priority=NOTICE

And I set follow settings to share.

vfs objects = full_audit

I cannot use setup full_audit share.What is this problem?

 

[akong]

Could truenas scale not support full_audit?

 

[denniskaka]

Yes, I had the same problem as you，hope to get help


There is a lot of content in the community about "SMB full_audit"
But it can't solve the problem under truenas scale.
TrueNAS-SCALE-22.12.1

EXAMPLES1
---------------------------------------------------------------------------------------------------
On share(s), set the Auxiliary parameters to contain:
vfs objects=full_audit

And under Services | SMB (edit with the pencil), set the Auxilary Parameters to this:
Code:
full_audit:prefix=%u|%I|%m|%S
full_audit:failure=connect
full_audit:success=mkdir rmdir write pwrite sendfile rename unlink
full_audit:facility=LOCAL5
full_audit:priority=NOTICE

(Solved) How to Set samba audit?

Hello, I install truenas and want enable samba audit.But I has try many solution.It's not working. How to enable samba audit?

www.truenas.com

EXAMPLES2
---------------------------------------------------------------------------------------------------
EXAMPLES
Log file and directory open operations on the [records] share using the LOCAL7 facility and ALERT priority, including the username and IP address. Logging excludes the open VFS function on failures:

[records]
path = /data/records
vfs objects = full_audit
full_audit:prefix = %u|%I
full_audit:success = open opendir
full_audit:failure = all !open
full_audit:facility = LOCAL7
full_audit:priority = ALERT

If an unknown operation name is used (for example an operation name is miss-spelled), the module will fail to load and clients will be refused connections to a share using this module.

vfs_full_audit