Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure events to be logged in Audit Logs #21255

Open
infinitetrooper opened this issue Mar 8, 2023 · 4 comments
Open

Configure events to be logged in Audit Logs #21255

infinitetrooper opened this issue Mar 8, 2023 · 4 comments
Assignees
Labels
Audit Logs Product Audit trails to ensure data security Business Edition Features that will be a part of our business edition Platform Administration Pod Issues related to platform administration & management Task A simple Todo

Comments

@infinitetrooper
Copy link
Contributor

Some customers would like to only log necessary events to Audit logs as they believe some events don't provide value to them. In this scenario, the customer should be able to configure a list of logs that want logged to the Audit Logs database.

@infinitetrooper infinitetrooper added Audit Logs Product Audit trails to ensure data security Business Edition Features that will be a part of our business edition Platform Administration Pod Issues related to platform administration & management labels Mar 8, 2023
@Eudod
Copy link

Eudod commented Jan 31, 2024

Hello! Existing audit logs are very detailed and very good for troubleshooting. However, for business operations and compliance they are not very convenient. For example, compliance officer may want to know who and when changed clients data in CRM, but they do not need info when one or another page was accessed. So having possibility to chose what kind of events to be logged would be useful.

@geoff-nunan
Copy link

I'd love to be able to exclude query execution from the audit log. It's much more of a runtime thing than an audit log thing. That would help keep a lid on the audit log size. One of our projects generates about 20GB of audit log every few months which has filled up the disk as we were not expecting the AppSmith database to grow

@infinitetrooper
Copy link
Contributor Author

Request from another user who's using API with username+password auth to fetch tokens. These params are visible in Audit logs and we need a way to disable this at an instance level.

@suavdebird
Copy link

It would be great to be able to have some sanitisation of sensitive data on the audit logs. We are using firebase username & password authentication which logs all parameters. It'd be great to have a toggle on query level to control logging of the details. Fo us a "audit level" drop down with the following states would do just perfect

  • everything - as at the moment
  • summary - query X' executed by user Xresulted insuccess or false`
  • disabled - not audited at all

At the moment we had to disable the audit logs altogether which is far from ideal.

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Audit Logs Product Audit trails to ensure data security Business Edition Features that will be a part of our business edition Platform Administration Pod Issues related to platform administration & management Task A simple Todo
Projects
None yet
Development

No branches or pull requests

7 participants
@Nikhil-Nandagopal @trishaanand @infinitetrooper @Eudod @geoff-nunan @suavdebird and others