Update audit log section

* Add `audit_log` config section * Rewrite `Audit log module` page
tarantool · Jan 17, 2024 · e853fc1 · e853fc1
1 parent 4cd1251
commit e853fc1
Show file tree

Hide file tree

Showing 9 changed files with 635 additions and 385 deletions.
diff --git a/doc/code_snippets/snippets/config/instances.enabled/audit_log/config.yaml b/doc/code_snippets/snippets/config/instances.enabled/audit_log/config.yaml
@@ -0,0 +1,16 @@
+groups:
+  group001:
+    iproto:
+      listen:
+      - uri: '127.0.0.1:3301'
+    replicasets:
+      replicaset001:
+        instances:
+          instance001:
+            audit_log:
+              to: file
+              file: audit_tarantool.log
+              filter: [ user_create,data_operations,ddl ]
+              format: json
+              spaces: [ bands ]
+              extract_key: true
diff --git a/doc/code_snippets/snippets/config/instances.enabled/audit_log/instances.yml b/doc/code_snippets/snippets/config/instances.enabled/audit_log/instances.yml
@@ -0,0 +1 @@
+instance001:
diff --git a/doc/code_snippets/snippets/config/instances.enabled/audit_log_pipe/config.yaml b/doc/code_snippets/snippets/config/instances.enabled/audit_log_pipe/config.yaml
@@ -0,0 +1,14 @@
+groups:
+  group001:
+    iproto:
+      listen:
+      - uri: '127.0.0.1:3301'
+    replicasets:
+      replicaset001:
+        instances:
+          instance001:
+            audit_log:
+              to: pipe
+              pipe: 'cronolog audit_tarantool.log'
+              format: json
+              extract_key: false
diff --git a/doc/code_snippets/snippets/config/instances.enabled/audit_log_pipe/instances.yml b/doc/code_snippets/snippets/config/instances.enabled/audit_log_pipe/instances.yml
@@ -0,0 +1 @@
+instance001:
diff --git a/doc/code_snippets/snippets/config/instances.enabled/audit_log_syslog/config.yaml b/doc/code_snippets/snippets/config/instances.enabled/audit_log_syslog/config.yaml
@@ -0,0 +1,16 @@
+groups:
+  group001:
+    iproto:
+      listen:
+      - uri: '127.0.0.1:3301'
+    replicasets:
+      replicaset001:
+        instances:
+          instance001:
+            audit_log:
+              to: syslog
+              syslog_server: 'unix:/dev/log'
+              syslog_facility: user
+              syslog_identity: 'tarantool'
+              filter: 'audit,auth,priv,password_change,access_denied'
+              extract_key: false
diff --git a/doc/code_snippets/snippets/config/instances.enabled/audit_log_syslog/instances.yml b/doc/code_snippets/snippets/config/instances.enabled/audit_log_syslog/instances.yml
@@ -0,0 +1 @@
+instance001: