Hello! Thank you for istruction:) is it ok that in samba_activity.log info about connections? something like this How can i configure, that only info about audit (open, mkdir, rmdir, unlink, write, rename, chmod, chown, for example) writes. For example, like this
Code:
Jan 23 17:38:39 storsrv snmpd[3760]: Connection from UDP: [192.168.3.171]:57036->[192.168.3.221]:161 Jan 23 17:38:39 storsrv snmpd[3760]: Connection from UDP: [192.168.3.171]:50948->[192.168.3.221]:161
Code:
[root@storsrv] /mnt/MainData/auditlogs# cat samba_activity.log | grep smbd_audit | grep test.txt Jan 23 16:30:37 storsrv smbd_audit: contoso\admin|192.168.3.6|192.168.3.6|Stuff|rename|ok|Новый текстовый документ.txt|test.txt Jan 23 16:30:53 storsrv smbd_audit: contoso\admin|192.168.3.6|192.168.3.6|Stuff|unlink|ok|test.txt