stream audit log to syslog

Registered by Sergei Glushchenko

1. Extract code to write to log file into separate unit with clear interface
2. Implement writing to syslog

Following variables will be added

    - audit_log_handler = {FILE|SYSLOG}, default is file. Whether to log
      into file or syslog.

    - audit_log_syslog_ident - string to use as iden for syslog.

    - audit_log_syslog_facility - string to use as facility value for syslog.

    - audit_log_syslog_priority - string to use as priority value for syslog.

Blueprint information

Status:
Complete
Approver:
None
Priority:
Medium
Drafter:
Sergei Glushchenko
Direction:
Approved
Assignee:
Sergei Glushchenko
Definition:
Approved
Series goal:
Accepted for 5.5
Implementation:
Implemented
Milestone target:
milestone icon 5.5.39-36.0
Started by
Sergei Glushchenko
Completed by
Laurynas Biveinis

Whiteboard

   New variable inroduced: audit_log_handler which takes values FLIE and SYSLOG.

   With FILE log handler plugin will log into file as it did before. With SYSLOG
   handler plugin will log with using syslog.

   Parameters audit_log_strategy, audit_log_buffer_size,
   audit_log_rotate_on_size, audit_log_rotations affect only FILE
   handler. Plugin doesn't perform any buffering and file rotations. It is
   delegated to syslog daemon.

   audit_log_flush with FILE handler writes closing sequence into file, reopens
   file and writes opening sequence. Flush normally used for manual log
   rotation. One can rename file and set audit_log_flush to TRUE which will
   cause completion of renamed file and creation of new one.

   With SYSLOG plugin does the same except that it does not actually do any log
   reopening, so you will only see closing and opening sequences in your log.

   To control syslog file handler following variables can be used:

   audit_log_syslog_ident, audit_log_syslog_facility, audit_log_syslog_priority
   They have the same meaning as appropriate parameters described in syslog(3)
   manual.

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.