Selahattin CILEK
2024-Feb-13 20:44 UTC
[Samba] Multiple Log Entries for the Same Operation
I am running *Samba 4.13* on *FreeBSD 14*, along with *Syslog-NG v4.4*. I have these lines in the *[global]* section of my configuration file: ??? full_audit:prefix = %U|%I|%m|%S ?? ?full_audit:success = connect mkdirat renameat create_file sendfile open close unlinkat streaminfo ?? ?full_audit:failure = none ?? ?full_audit:facility = local7 ?? ?full_audit:priority = NOTICE And when I open a file, I see two consecutive lines for the same operation: 2024-02-13T23:21:14.553971+03:00 nas.abc.com smbd_audit 8416 - - someuser|192.168.1.2|somehost|someshare|create_file|ok|0x80|file|open|/tank/someshare/somefile.jpg 2024-02-13T23:21:14.665831+03:00 nas.abc.comsmbd_audit 8416 - - someuser|192.168.1.2|somehost|someshare|create_file|ok|0x80|file|open|/tank/someshare/somefile.jpg Why does that happen? Is there anything I can do to prevent this? -- This email has been checked for viruses by Avast antivirus software. www.avast.com