luxolus
/
open-nomad
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity
open-nomad/website/source/docs/audit/syslog.html.md

1.2 KiB
Raw Blame History

layout page_title sidebar_current description
docs Audit Backend: Syslog docs-audit-syslog The "syslog" audit backend writes audit logs to syslog.

Audit Backend: Syslog

Name: syslog

The "syslog" audit backend writes audit logs to syslog.

It currently does not support a configurable syslog destination, and always sends to the local agent. This backend is only supported on Unix systems, and should not be enabled if any standby Vault instances do not support it.

Options

When enabling this backend, the following options are accepted:

  • facility (optional) - The syslog facility to use. Defaults to "AUTH".
  • tag (optional) - The syslog tag to use. Defaults to "vault".
  • log_raw (optional) Should security sensitive information be logged raw. Defaults to "false".

Format

Each line in the audit log is a JSON object. The "type" field specifies what type of object it is. Currently, only two types exist: "request" and "response".

The line contains all of the information for any given request and response.

If log_raw if false, as is default, all sensitive information is first hashed before logging. If explicitly enabled, all values are logged raw without hashing.