{"timestamp":"2018-01-16T01:04:36.194271-08:00","real_userid":{"source":"internal","user":"couchbase"},"auditd_enabled":true,"descriptors_path":"/opt/couchbase/etc/security","hostname":"node4-cb500-centos7.vagrants","log_path":"/opt/couchbase/var/lib/couchbase/logs","rotate_interval":86400,"version":1,"id":4096,"name":"configured audit daemon","description":"loaded configuration file for audit daemon"}
{"timestamp":"2018-01-16T01:04:39.803-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:05:01.130-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"full_name":"","roles":["admin"],"identity":{"source":"local","user":"cbadminbucket"},"real_userid":{"source":"ns_server","user":"Administrator"},"sessionid":"ba2d0cab48867e31a56e000c0f37f19e","remote":{"ip":"10.112.170.1","port":65452},"timestamp":"2018-01-16T01:05:28.402-08:00","id":8232,"name":"set user","description":"User was added or updated"}
{"timestamp":"2018-01-16T01:05:36.435-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:05:43.351-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32768,"name":"Create Function","description":"Eventing function definition was created or updated"}
{"timestamp":"2018-01-16T01:05:44.428-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:08:47.951-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:09:03.162-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_jnnkfjakfakfkbaf","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:09:10.342-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_jnnkfjakfakfkbaf","id":32768,"name":"Create Function","description":"Eventing function definition was created or updated"}
{"timestamp":"2018-01-16T01:09:11.797-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_jnnkfjakfakfkbaf","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:09:54.239-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:09:54.883-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32779,"name":"Set Settings","description":"Save settings for a given app"}
{"timestamp":"2018-01-16T01:09:55.362-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:09:58.906-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32773,"name":"Delete Drafts","description":"Eventing function draft definitions were deleted"}
{"timestamp":"2018-01-16T01:09:59.282-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32769,"name":"Delete Function","description":"Eventing function definition was deleted"}
{"timestamp":"2018-01-16T01:10:02.139-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:11:53.645-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:11:53.763-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_jnnkfjakfakfkbaf","id":32779,"name":"Set Settings","description":"Save settings for a given app"}
{"timestamp":"2018-01-16T01:11:54.252-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_jnnkfjakfakfkbaf","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:11:57.279-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_jnnkfjakfakfkbaf","id":32773,"name":"Delete Drafts","description":"Eventing function draft definitions were deleted"}
{"timestamp":"2018-01-16T01:11:57.293-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_jnnkfjakfakfkbaf","id":32769,"name":"Delete Function","description":"Eventing function definition was deleted"}
{"timestamp":"2018-01-16T01:27:42.952-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:27:47.420-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:27:58.244-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:28:41.006-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:28:45.751-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:29:30.836-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32768,"name":"Create Function","description":"Eventing function definition was created or updated"}
{"timestamp":"2018-01-16T01:29:31.987-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:29:50.649-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:30:05.025-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32768,"name":"Create Function","description":"Eventing function definition was created or updated"}
{"timestamp":"2018-01-16T01:30:06.292-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:30:23.190-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:30:52.292-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:30:52.583-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32779,"name":"Set Settings","description":"Save settings for a given app"}
{"timestamp":"2018-01-16T01:30:53.184-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:31:05.598-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:31:12.385-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:31:19.543-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:31:27.652-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:31:34.564-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:31:57.465-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32773,"name":"Delete Drafts","description":"Eventing function draft definitions were deleted"}
{"timestamp":"2018-01-16T01:31:57.545-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32769,"name":"Delete Function","description":"Eventing function definition was deleted"}
{"timestamp":"2018-01-16T01:32:07.602-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:32:22.149-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:32:25.891-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32773,"name":"Delete Drafts","description":"Eventing function draft definitions were deleted"}
{"timestamp":"2018-01-16T01:32:26.080-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32769,"name":"Delete Function","description":"Eventing function definition was deleted"}
{"timestamp":"2018-01-16T01:32:29.464-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:32:31.971-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:32:32.116-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32779,"name":"Set Settings","description":"Save settings for a given app"}
{"timestamp":"2018-01-16T01:32:32.420-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:33:24.820-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32768,"name":"Create Function","description":"Eventing function definition was created or updated"}
{"timestamp":"2018-01-16T01:33:25.923-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:33:57.521-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:34:17.794-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:34:17.901-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32779,"name":"Set Settings","description":"Save settings for a given app"}
{"timestamp":"2018-01-16T01:34:18.397-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:34:48.400-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32773,"name":"Delete Drafts","description":"Eventing function draft definitions were deleted"}
{"timestamp":"2018-01-16T01:34:48.412-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit2222","id":32769,"name":"Delete Function","description":"Eventing function definition was deleted"}
{"timestamp":"2018-01-16T01:35:17.543-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:35:19.658-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:35:47.478-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32768,"name":"Create Function","description":"Eventing function definition was created or updated"}
{"timestamp":"2018-01-16T01:35:48.538-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:36:29.988-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:36:39.367-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:36:39.571-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32779,"name":"Set Settings","description":"Save settings for a given app"}
{"timestamp":"2018-01-16T01:36:39.741-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:36:59.144-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32768,"name":"Create Function","description":"Eventing function definition was created or updated"}
{"timestamp":"2018-01-16T01:37:00.263-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:37:09.163-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:38:27.003-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32772,"name":"Fetch Drafts","description":"Eventing function draft definitions were read"}
{"timestamp":"2018-01-16T01:38:28.459-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:38:28.531-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32779,"name":"Set Settings","description":"Save settings for a given app"}
{"timestamp":"2018-01-16T01:38:28.660-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:38:39.639-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:38:39.661-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32779,"name":"Set Settings","description":"Save settings for a given app"}
{"timestamp":"2018-01-16T01:38:39.713-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}
{"timestamp":"2018-01-16T01:39:01.259-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"<nil>","id":32771,"name":"List Deployed","description":"Eventing deployed functions list was read"}
{"timestamp":"2018-01-16T01:39:01.391-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32779,"name":"Set Settings","description":"Save settings for a given app"}
{"timestamp":"2018-01-16T01:39:01.586-08:00","real_userid":{"source":"ns_server","user":"Administrator"},"context":"test_audit","id":32774,"name":"Save Draft","description":"Save a draft definition to the store"}