Audit service configuration¶
All the config files are in JSON format, and can be modified using the $SCULPTOR/sbin/auditmgt.q program or edited manually.
Global settings¶
There is one Global JSON settings file (which can also be relocated using the scsfr service), that afects the whole audit service:
$SCULPTOR/audit/settings.json
In that global settings file we define these flags:
AuditActive set to true or false. To enable/disable completely the audit service. When changed kfserver/kfservnt must be restarted
AuditFreeze used when AuditActive is true. When set to true it disables the audit process but maintains the audit service active, waiting to be unfrozen. This flag defines the default behaviour when starting kfserver. Then the function audit_freeze() can be used to dynamically change the service state.
Per AuditDB settings¶
There is one AuditDB JSON settings file for each auditDb (which can be relocated using the scsfr service):
$SCULPOR/audit/auditDbDir/settings.json
In that settings file we define these flags:
AuditDbActive set to true or false. To enable/disable the audit service for this specific AuditDb. When changed the kfserver must be restarted. There is a way to enable/disable a database on the server online using the audit_disable_database() and audit_enable_database() methods.
AuditedDirectory is append before all the keyed filenames in the auditDb filetable. When empty (“”) the whole pathname must be specified in the filetable. Otherwise a relative directory must be specified (no “..” directory must be used on the filenames). The value must be in a canonical format (single case and using “/” as a directory separator)
RELATED TOPICS |