Details
Description
Check props field for create and edit bucket fields in audit_events.json and audit.log
Create Bucket event mentioned below, it will be similarly for modify bucket event id = 8201.
Value of field props in audit_events.json does not match audit.log.
Event – Create Bucket
Event Defintion in audit_events.json:
{
"id": 8201,
"name": "create bucket",
"description": "Bucket was created",
"sync": false,
"enabled": true,
"mandatory_fields": {
"timestamp": "",
"real_userid":
,
"remote":
,
"name": "",
"type": "",
"props": ""
},
"optional_fields":
}
Actual event written to audit.log – look at the field ‘props'
{"timestamp":"2015-02-03T09:18:07.179-08:00", "id":8201, "name":"create bucket", "desc":"Bucket was created", "props":
, "type":"membase", "name":"test", "real_userid":
{"source":"ns_server", "user":"Administrator"}, "sessionid":"749ceeb2be1581dd95d839938b58e3a4", "remote":{"ip":"192.168.2.217", "port":57457}}