[inquiry]User activity log

[decromel]

Hi All,

I'm fairly new to the world of Freenas and Linux. Through reading the threads I was able to successfully install and configure Freenas as a file server. I came across a thread regarding a feature/module on VFS Object Full_audit and was hoping to implement it. But my limited knowledge on how to install/configure Full_audit keeps getting in the way.


Do I need to install anything on my Freenas 9.1.1 to make it work?
Do I need to downgrade to a lower version?
I tried to follow the steps/codes mentioned here but to no success.


Thanks

 

[Dusan]

There's no need to install anything or to downgrade. Adding "vfs objects = full_audit" to the Auxiliary parameters of a share and restarting CIFS is enough to start the logging. The log entries will appear in /var/log/messages. However, be warned that this will generate lot of data. You should use the vfs_full_audit:success and vfs_full_audit:failure options to select what you want to log. See the documentation here: https://www.samba.org/samba/docs/man/manpages-3/vfs_full_audit.8.html

 

[decromel]

Thank you Dusan.
I was able to make it work and see the logs.
I'll try to play around with the options.