[Users] oVirt auditing

[Sander Grendelman]

Is this something you could use https://<your engine host>/api/events for?

On Thu, Dec 5, 2013 at 4:51 PM, Jakub Bittner <j.bittner at nbu.cz> wrote:
> Hello,
>
> I am curious how to audit user actions in oVirt web interface. From
> engine.log we are able to extract when user logged in, when he updated
> vnicProfile and so, but we can not get exact changes (behavior).
>
> Right now I can get logs like:
>
> 2013-12-05 16:35:46,270 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (ajp--127.0.0.1-8702-6) Correlation ID: 7e60ae1, Call Stack: null, Custom
> Event ID: -1, Message: Interface nic1 (VirtIO) was updated for VM
> test.test.org.   (User: user1)
>
> But it would be nice to get logs like:
>
> 2013-12-05 16:35:46,270 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (ajp--127.0.0.1-8702-6) Correlation ID: 7e60ae1, Call Stack: null, Custom
> Event ID: -1, Message: Interface nic1 (VirtIO) was updated for VM
> test.test.org from secure_vlan to unsecure_vlan.   (User: user1)
>
> My point is to have a feature which can give us possibility to construct
> exact user behavior and action in managing oVirt. It could be useful not
> even in hunting bugs, but primary in security problem hunting.
>
> Thank you.
>
> Jakub Bittner
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>