Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Config] Update 'Audit log' to using a new config #3983

Merged
merged 4 commits into from
Feb 8, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
audit_log:
to: file
file: 'audit_tarantool.log'
filter: [ user_create,data_operations,ddl,custom ]
format: json
spaces: [ bands ]
extract_key: true

groups:
group001:
replicasets:
replicaset001:
instances:
instance001:
iproto:
listen:
- uri: '127.0.0.1:3301'
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
instance001:
Original file line number Diff line number Diff line change
@@ -0,0 +1,51 @@
-- myapp.lua --

-- Create space
function create_space()
box.schema.space.create('bands')
box.space.bands:format({
{ name = 'id', type = 'unsigned' },
{ name = 'band_name', type = 'string' },
{ name = 'year', type = 'unsigned' }
})
box.space.bands:create_index('primary', { type = "tree", parts = { 'id' } })
box.space.bands:create_index('secondary', { type = "tree", parts = { 'band_name' } })
box.schema.user.grant('guest', 'read,write,execute', 'universe')
end
-- Insert data
function load_data()
box.space.bands:insert { 1, 'Roxette', 1986 }
box.space.bands:insert { 2, 'Scorpions', 1965 }
end

local audit = require('audit')
-- Log message string
audit.log('Hello, Alice!')
-- Log format string and arguments
audit.log('Hello, %s!', 'Bob')
-- Log table with audit log field values
audit.log({ type = 'custom_hello', description = 'Hello, World!' })
audit.log({ type = 'custom_farewell', user = 'eve', module = 'custom', description = 'Farewell, Eve!' })
-- Create a new log module
local my_audit = audit.new({ type = 'custom_hello', module = 'my_module' })
my_audit:log('Hello, Alice!')
my_audit:log({ tag = 'admin', description = 'Hello, Bob!' })

-- Log 'Hello!' message with the VERBOSE severity level
audit.log({ severity = 'VERBOSE', description = 'Hello!' })

-- Log 'Hello!' message with a shortcut helper function
audit.verbose('Hello!')

-- Like audit.log(), a shortcut helper function accepts a table of options
audit.verbose({ description = 'Hello!' })

-- Severity levels are available for custom loggers
local my_logger = audit.new({ module = 'my_module' })
my_logger:log({ severity = 'ALARM', description = 'Alarm' })
my_logger:alarm('Alarm')

-- Overwrite session_type and remote fields
audit.log({ type = 'custom_hello', description = 'Hello!',
session_type = 'my_session', remote = 'my_remote' })
-- End
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
audit_log:
to: pipe
pipe: '| cronolog audit_tarantool.log'

groups:
group001:
replicasets:
replicaset001:
instances:
instance001:
iproto:
listen:
- uri: '127.0.0.1:3301'
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
instance001:
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
audit_log:
to: syslog
syslog_server: 'unix:/dev/log'
syslog_facility: 'user'
syslog_identity: 'tarantool'
filter: 'audit,auth,priv,password_change,access_denied'
extract_key: false

groups:
group001:
iproto:
listen:
- uri: '127.0.0.1:3301'
replicasets:
replicaset001:
instances:
instance001:
iproto:
listen:
- uri: '127.0.0.1:3301'
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
instance001:
Loading
Loading