eventlogadm

Samba Windows event log manager

TLDR

Create event log database

$ eventlogadm -o addsource [Application] [/var/lib/samba/eventlog]

Dump event log

$ eventlogadm -o dump [Application]

Write event to log

$ eventlogadm -o write [Application] [message]

SYNOPSIS

eventlogadm [options] operation [args]

eventlogadm is a Samba utility for managing Windows-compatible event logs on Unix systems. It allows creating, reading, and writing event log databases that Windows clients can access.The tool works with Samba's implementation of the Windows Event Log service. Event logs are stored in TDB (Trivial Database) format and can be viewed from Windows Event Viewer.eventlogadm is useful for integrating Unix logging with Windows-centric management tools.

PARAMETERS

OPERATION

Operation: addsource, dump, write.

-o OP

Operation to perform.

-s CONF

Samba config file.

addsource NAME PATH

Create event log source.

dump NAME

Dump log contents.

write NAME MSG

Write event.

CONFIGURATION

/etc/samba/smb.conf

Samba server configuration that defines event log paths and settings.

INSTALL

sudo apt install samba

sudo dnf install samba

sudo pacman -S samba

sudo apk add samba-server

sudo zypper install samba

brew install samba

nix profile install nixpkgs#samba

CAVEATS

Requires Samba configured. Event log format specific to Windows compatibility. Storage location depends on Samba config.

HISTORY

eventlogadm is part of Samba, providing Windows event log compatibility for the Unix implementation of Windows networking protocols.