[midPoint] Logging to logstash, concise audit log

[Pertti Kellomäki]

Hi all,


Is anyone logging midPoint logs to logstash? We are required to produce an audit log that is shipped off to a remote log server.  I have experimented with filebeat so I have an idea how this works, but any practical advice is much appreciated.


The log should ideally be somewhat independent of midPoint, using user names and role names instead of midPoint oid's. Turning on detailed audit logging gives me those, but it also gives lots of information that I don't really need. If there is some intermediate solution I would love to hear about it.


Maybe there is something I don't understand but the compact audit log format seems to lack some information. For example if I give a user a role, I see the requester and the user being given the role, but the role being assigned does not seem to show up in the log entry.


Pertti

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170217/ad0b3c08/attachment.htm>