Where can I see smb-server and client logs in Windows?

Question

Computer networks

Hello, the situation is like the scheme: The problem is that the session with the 1C8 file database is terminated abnormally on the smb-client.
I assume the following reasons:
1. The physical link with the router at the client or server fails and the smb session is torn.
2. The client or server does not lose the physical link with the router, but the L3 link with the DC disappears and after the life of the token (kerberos) expires, the client cannot renew it with the DC and the smb session breaks.
Is there an smb-server/client log in Windows so that it is possible to view entries with the date and time of the start and end of sessions and the reasons for the terminations? Also interested in any events related to the kerberos token.
To solve the problem, advice is not needed, only information on the logs.

Answer 1

in Windows, this is called an audit (you will have to enable it for the events you need), then look at the logs in the EventLog. But whether you can see everything you want there - I'm not sure.