Because my debian sarge dist doesn't have eventlogadm i download the source and compile it. I follow the instructions on http://wiki.samba.org/index.php/Event_Logging and insert the line eventlog list = Application, System, Security, SyslogLinux in smb.conf in the main - section. But when i start the command tail -f /var/log/syslog | /usr/sbin/parselog.pl | eventlogadm -d SysLogLinux as root i get the following error: Starting write for eventlog [SysLogLinux] Active eventlog names (from smb.conf): -------------------------------------- <None specified> can't open the eventlog TDB (SysLogLinux) Looking for ls -la /var/run/samba/eventlog drwxr-xr-x 2 root root 4096 2006-05-31 14:51 . drwxr-xr-x 5 root root 4096 2006-06-01 07:26 .. -rw------- 1 root root 8192 2006-05-31 14:51 application.tdb -rw------- 1 root root 8192 2006-05-31 14:51 security.tdb -rw------- 1 root root 8192 2006-05-31 14:51 sysloglinux.tdb -rw------- 1 root root 8192 2006-05-31 14:51 system.tdb Do i miss something in the smb.conf? Thanks in advance -- Thorsten Hamester Systemadministrator