freenas 9.10 users activity with full_audit problem

[bluecolor]

hi. Hello there. I have seen many examples. but I can not find where the problem. Please can you help?

https://forums.freenas.org/index.ph...on-samba-shares-full_audit-freenas-9-3.13840/

1. "Volume0" named, I have to mount the new disk.
2. add to CIFS service Auxiliary parameters
Code:

Code:

log file = /mnt/volume0/logs/samba/%m.log
full_audit:prefix = %u|%I|%S
full_audit:failure = connect
full_audit:success = connect disconnect opendir mkdir rmdir closedir open close read pread write pwrite sendfile rename unlink chmod fchmod chown fchown chdir ftruncate lock symlink readlink link mknod realpath
full_audit:facility = local5
full_audit:priority = notice

3. add to all sharing-windows share (CIFS):
Code:

Code:

vfs object = full_audit

4.edit syslog.conf (at /conf/base/etc/) (added)

Code:

local5.notice                     /mnt/volume0/logs/samba/samba_docs.log
local5.info                     /mnt/volume0/logs/samba/samba_activity.log
local0.notice;local1.notice;local2.notice;local3.notice /var/log/messages
local4.notice;local6.notice;local7.notice /var/log/messages

5. "/etc/local/syslog-ng.conf " and " /conf/base/etc/local/syslog-ng.conf.freenas" (added.)

Code:

destination m_samba_audit { file("/var/log/samba4/activity.log"); };
log { source(src); filter(f_local5);destination(m_samba_audit); flags(final); };

and reboot freenas. but no log. I'm checking ssh. "/mnt/volume0/logs/samba/" no directory. What could be the problem? Where is wrong?

 

[Nick2253]

Please put your code in code blocks (use the "code" button on the toolbar).

Forgive me if I'm being dense, but what exactly is the problem here? What are you trying to do? Why do you need all that logging?

 

[bluecolor]

Hello.
I will delete unnecessary controls. but, the problem is not to create a log file.

 

[Nick2253]

What is the name of your pool? Is it volume0?

Step one is to get the log file created. My guess is that you just copied and pasted the contents from the link, without changing it for your environment, but I could be wrong.