Questions tagged [audit-logging]

Audit-logging is the practice of keeping records of system activity

Audit-logging is the practice of keeping records of system activity. Audit logging does not contain information about the technical operation of a system, like print statements, but rather keeps track of discrete events that occur within a system. Examples are "User X accessed data Y at Time T", etc.

389 questions
3
votes
3 answers

Using powershell to get the "Audit Policy" security setting value

I am trying to use Powershell (auditpol) to query the security setting values of the Audit Policy items. So far with all the auditpol commands, I only able to get the subcategories value instead. auditpol /get /category:* So far I could only get the…
hehehe
  • 33
  • 1
  • 3
3
votes
1 answer

Is there a way to measure log volume in PostgreSQL instance?

Started up a new postgres database instance and enable pgaudit logs. Is there a way I can monitor the volume of logs ingested on the database as well as the ingestion rate so that it does not exceed a certain threshold (or better yet be alerted that…
Polacan
  • 55
  • 5
3
votes
0 answers

Keycloak custom audit logging

is it possible to make custom audit logging format ? Now my audit log, when someone log in, looks like…
Miracl3
  • 41
  • 4
3
votes
1 answer

EF Core ChangeTracker() current and original values are the same for Modified entities

I'm creating an audit trail using EF Core's change tracker, and for every entity that has the state Added, Modified or Deleted, I create a new audit entity to insert into my Audit table. I want to take a snapshot of what I had before an UPDATE and…
Wpowell
  • 31
  • 3
3
votes
0 answers

Where are the auth logs in OpenShift?

I'm trying to audit access logs (including failed access attempts). I have a fluentd collector running so I can export the logs but I can't find them to export them! I thought this might help, but when I use the console and go to Workloads → Pods →…
joar
  • 473
  • 3
  • 7
3
votes
3 answers

How can I transfer logs from Logs Viewer of GCP to Slack or email?

I have been exploring to transfer the JsonPayload message field from Logs viewer service (which are syslogs of a service) of GCP to a slack network, but owing to this I am not able to find any predefined services (like alerting policies to transfer…
3
votes
3 answers

Restarting auditd service gives dependency error

I am trying to configure auditing for docker daemon as follows: Add the line below to the /etc/audit/audit.rules file: -w /usr/bin/dockerd -k docker Then, restart the audit daemon using the following command: service auditd restart This gives…
hemanik
  • 965
  • 3
  • 14
  • 33
3
votes
1 answer

Should I use elasticsearch for audit logs?

I am building an application in a micro service architecture . So I have my different business models running on different microservices. Microservices are using graph and document databases. What I have to do is, I need to keep all audit logs…
89n3ur0n
  • 921
  • 11
  • 24
3
votes
2 answers

ASP.NET Core Entity changing history

I have many controllers like this: public class EntityController : Controller { private readonly IEntityRepository _entity; public EntityController(IEntityRepository entity) { _entity = entity; } [Authorize] …
3
votes
1 answer

Oracle 11g audit trail for specific tables

I would like to submit a question about creating an audit trail for specific tables on Oracle 11g database. We would like to track user's changes, on some specific tables, that records has been changed from the application (front end) side. Of…
DoeUS
  • 113
  • 13
3
votes
2 answers

Windows User Mode Process Syscall Tracing With ETW

I have been told by a few people that ETW provides a mechanism by which to capture syscalls made by user mode processes. I have enumerated the available providers and have only come up with two possible that might provide this information. The first…
Chris
  • 83
  • 1
  • 3
  • 9
3
votes
2 answers

CakePHP 3: Accessing current user in model

Since i'm new to CakePHP, I have simple problems I cannot figure out. I use CakePHP 3.4. I try to write a simple logger functionality. Every change applied to a record, I want to be logged to the ChangeLog model. Using afterSave() event, I have…
3
votes
1 answer

Soap Request Logging - Elegant solution for excluding sensitive data

I am currently working on an application that uses Apache CXF to make requests to a third party. We need to log every request that is being sent. The issue is, many of these requests contain sensitive data that cannot be logged. The data itself is…
mad_fox
  • 3,030
  • 5
  • 31
  • 43
3
votes
0 answers

Spring Boot Audit Logging by Example

Almost every aspect of Spring Boot's documentation have proven to be treasure troves of copious amounts of information. That is until I get to Chapter 50: Auditing. I am trying to understand the 2 paragraphs that make up this entire chapter. If I'm…
smeeb
  • 27,777
  • 57
  • 250
  • 447
3
votes
1 answer

DDL trigger to get username in SQL Server

I have a "who-did-what-to-which-table-and-when" requirement from one of my clients. Brief description of the system is as follows: No source code of the software No tracking of events by the software All users use the application under the "sa"…
Rizzy
  • 35
  • 5
1 2
3
25 26