Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-14176

Audit: Audit logs should have a consistent log format.

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Won't Fix
    • Major
    • 4.0.0
    • 4.0.0
    • memcached
    • Security Level: Public
    • Debian 7
      4.0.0-1464

    Description

      From the examples below you can see that same attributes (timestamp) is in different places in line 1 and 2. Ideally where possible the logs format should be consistent. For example timestamp should be at the start.

      {{"timestamp":"2015-03-27T16:25:19.927Z","real_userid":{"source":"internal","user":"couchbase"},"auditd_enabled":true,"descriptors_path":"/opt/couchbase/etc/security","hostname":"debian-7-amd64-default","log_path":"/opt/couchbase/var/lib/couchbase/logs","rotate_interval":86400,"version":1,"id":4096,"name":"configured audit daemon","description":"loaded configuration file for audit daemon"}
      {"bucket_name":"default","real_userid":{"source":"ns_server","user":"Administrator"},"sessionid":"8ad24063a146573039236b6f6e501b0a","remote":{"ip":"192.168.74.1","port":58713},"timestamp":"2015-03-27T16:27:53.841Z","id":8203,"name":"delete bucket","description":"Bucket was deleted"}
      {"props":{"eviction_policy":"value_only","num_threads":3,"flush_enabled":false,"purge_interval":"undefined","auth_type":"sasl","ram_quota":104857600,"replica_index":false,"num_replicas":1},"type":"membase","bucket_name":"test","real_userid":{"source":"ns_server","user":"Administrator"},"sessionid":"25ae20e7eddb4ab342543a8801ecd813","remote":{"ip":"192.168.74.1","port":60922},"timestamp":"2015-03-27T18:03:40.419Z","id":8201,"name":"create bucket","description":"Bucket was created"}
      {"props":{"eviction_policy":"value_only","num_threads":3,"purge_interval":"undefined","auth_type":"sasl","ram_quota":131072000,"num_replicas":1},"type":"membase","bucket_name":"test","real_userid":{"source":"ns_server","user":"Administrator"},"sessionid":"65b4334f75fa71584964c74a0163bec8","remote":{"ip":"192.168.74.1","port":60928},"timestamp":"2015-03-27T18:04:54.495Z","id":8202,"name":"modify bucket","description":"Bucket was modified"}
      

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            pvarley Patrick Varley (Inactive)
            pvarley Patrick Varley (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty