Re: [Users] oVirt auditing
On 12/05/2013 06:13 PM, Jakub Bittner wrote:
Dne 5.12.2013 17:00, Sander Grendelman napsal(a):
> https://<your engine host>/api/events
Great, I did not know about this page, it is better(formated) source
than logs, but it still has the same issue. I can get info about what
happened, but not exact info about what was done.
just btw, this is the "events" log from the webadmin.
it covers actions done by users, not content of the edit operation
(something piotr started looking into).
with the move of the gui to work over the rest api, maybe just auditing
the api payload for these actions would be good enough?
<event href="/api/events/5341" id="5341">
<description>Interface nic1 (VirtIO) was updated for VM
server1.test.org. (User: user1)</description>
<code>934</code>
<severity>normal</severity>
<time>2013-12-05T16:35:46.263+01:00</time>
<correlation_id>7e60ae1</correlation_id>
<user href="/api/users/6d8fd48a-1072-11e3-b3ea-001a4ag8039d"
id="6d8fd48a-1072-11e3-c3ea-001a4aa8039d"/>
<vm href="/api/vms/cc821292-80c0-4b85-a912-0b8a969c22c9"
id="cc821292-80c0-4b85-a832-0b8a969c22c9"/>
<cluster href="/api/clusters/99408929-78cf-4dc7-a532-9d998063fa95"
id="99408929-82cf-4dc7-a532-9d998063fa95"/>
<data_center
href="/api/datacenters/5849b030-626e-47cb-ad90-3ce782d831b3"
id="5849b030-612e-47cb-ad90-3ce782d831b3"/>
<origin>oVirt</origin>
<custom_id>-1</custom_id>
<flood_rate>30</flood_rate>
</event>
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users