Long term logs for vfs_full_audit

[hikingpete]

I make use of samba's vfs_full_audit module to track changes made by users. It's really helpful for tracking down all kinds of things that my users do. vfs_full_audit logs via syslog, and for now I find the logs in /var/log/messages. The problem is that I end up with only about three days worth of logs due to log rotation. I'm a little hesitant to start manually changing config files, as I'm not really sure what FreeNAS considers to be its domain here. Unfortunately I can't tell vfs_full_audit to directly log to a file. What's the best way for me to go about preserving these log messages for at least a couple weeks?

 

[dlavigne]

The GUI does let you send the logs to a remote syslog server, so that's an option.