Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-27069

Eventing events not getting written to the audit logs.

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Major
    • 5.5.0
    • 5.5.0
    • eventing
    • None

    Description

      Build : 5.1.0-1477

      Tried undeploying and deleting a function on a cluster that had auditing enabled. These events didnt get written to the audit log. The eventing log had entries like these :

      2017-11-30T22:01:12.401-08:00 [Debug] Allowing access to /deleteAppTempStore/?name=doc_timer_op_1
      2017-11-30T22:01:12.401-08:00 [Info] Deleting drafts
      2017-11-30T22:01:12.401-08:00 [Trace] Audit event 32773 with context <nil> on request &{GET /deleteAppTempStore/?name=doc_timer_op_1 HTTP/1.1 1 1 map[Accept-Language:[en-us] Connection:[keep-alive] Cookie:[ui-auth-172.23.108.234%3A8091=d50216fbd661870412c0a93b28296dcf] Menelaus-Auth-Domain:[admin] Menelaus-Auth-User:[Administrator] User-Agent:[Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7] Accept-Encoding:[gzip, deflate] Accept:[application/json, text/plain, */*] Menelaus-Auth-Token:[d50216fbd661870412c0a93b28296dcf] Ns-Server-Auth-Token:[d50216fbd661870412c0a93b28296dcf] Cache-Control:[no-cache] Ns-Server-Ui:[yes yes] Invalid-Auth-Response:[on] Pragma:[no-cache] Referer:[http://172.23.108.234:8091/ui/index.html]] {} <nil> 0 [] false 172.23.108.234:8091 map[] map[] <nil> map[] 172.23.108.234:53238 /deleteAppTempStore/?name=doc_timer_op_1 <nil> <nil> <nil> 0xc44016e0c0}
      2017/11/30 22:01:12 audit: Writing audit event. eventId=32773, event={{2017-11-30T22:01:12.402-08:00 {ns_server Administrator}} <nil>}
      2017-11-30T22:01:12.485-08:00 [Warn] Audit event {{2017-11-30T22:01:12.402-08:00 {ns_server Administrator}} <nil>} lost due to audit: Error audit: Error in getting auth for memcached Unable to find given hostport in cbauth database: `172.23.108.234:11210'
      2017-11-30T22:01:12.774-08:00 [Debug] Allowing access to /deleteApplication/?name=doc_timer_op_1
      2017-11-30T22:01:12.774-08:00 [Info] Deleting application doc_timer_op_1 from primary store
      2017-11-30T22:01:12.774-08:00 [Trace] Audit event 32769 with context doc_timer_op_1 on request &{GET /deleteApplication/?name=doc_timer_op_1 HTTP/1.1 1 1 map[Referer:[http://172.23.108.234:8091/ui/index.html] Accept:[application/json, text/plain, */*] Menelaus-Auth-Domain:[admin] Menelaus-Auth-Token:[d50216fbd661870412c0a93b28296dcf] User-Agent:[Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7] Ns-Server-Ui:[yes yes] Connection:[keep-alive] Cookie:[ui-auth-172.23.108.234%3A8091=d50216fbd661870412c0a93b28296dcf] Invalid-Auth-Response:[on] Pragma:[no-cache] Ns-Server-Auth-Token:[d50216fbd661870412c0a93b28296dcf] Accept-Language:[en-us] Cache-Control:[no-cache] Menelaus-Auth-User:[Administrator] Accept-Encoding:[gzip, deflate]] {} <nil> 0 [] false 172.23.108.234:8091 map[] map[] <nil> map[] 172.23.108.234:53238 /deleteApplication/?name=doc_timer_op_1 <nil> <nil> <nil> 0xc42e37dd80}
      2017/11/30 22:01:12 audit: Writing audit event. eventId=32769, event={{2017-11-30T22:01:12.776-08:00 {ns_server Administrator}} doc_timer_op_1}
      2017-11-30T22:01:12.866-08:00 [Warn] Audit event {{2017-11-30T22:01:12.776-08:00 {ns_server Administrator}} doc_timer_op_1} lost due to audit: Error audit: Error in getting auth for memcached Unable to find given hostport in cbauth database: `172.23.108.234:11210'
      

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              siri Sriram Melkote (Inactive)
              mihir.kamdar Mihir Kamdar (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty