You should be able to enable audit for files using standard file security dialog in Windows.
--- With best regards
Andrei Borzenkov Senior system engineer FTS WEMEAI RUC RU SC TMS FOS [cid:image001.gif@01D0F1FC.5C899F00] FUJITSU Zemlyanoy Val Street, 9, 105 064 Moscow, Russian Federation Tel.: +7 495 730 62 20 ( reception) Mob.: +7 916 678 7208 Fax: +7 495 730 62 14 E-mail: Andrei.Borzenkov@ts.fujitsu.commailto:Andrei.Borzenkov@ts.fujitsu.com Web: ru.fujitsu.comhttp://ts.fujitsu.com/ Company details: ts.fujitsu.com/imprinthttp://ts.fujitsu.com/imprint.html This communication contains information that is confidential, proprietary in nature and/or privileged. It is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s) or the person responsible for delivering it to the intended recipient(s), please note that any form of dissemination, distribution or copying of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender and delete the original communication. Thank you for your cooperation. Please be advised that neither Fujitsu, its affiliates, its employees or agents accept liability for any errors, omissions or damages caused by delays of receipt or by any virus infection in this message or its attachments, or which may otherwise arise as a result of this e-mail transmission.
From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Jeff Cleverley Sent: Friday, September 18, 2015 4:25 AM To: Toasters@teaparty.net Subject: Cifs share access log
Greetings,
Is there a way to have the system log what users connect via cifs AND also show what share they connect to? This is a 7.3.2 system.
I've been trying various cifs options. I can see where it log who I am, and where I'm coming from, but not what I'm trying to access, or what share I mounted.
Some mystery deletes have been occurring so we are trying to track down who may be accessing that particular share. Ideally I want to know when they connect and disconnect at a minimum so we have an idea when they were there.
For now I just have a script checking cifs sessions and logging connections to the share to a file. I'd rather see it in messages or audit instead.
Thanks,
Jeff
-- Jeff Cleverley IT Engineer 4380 Ziegler Road Building 1, Dock 1 Fort Collins, Colorado 80525 970-288-4611
