[AuditSettings]
| Setting | Summary |
|---|---|
| Audit | Enables or disables the generation of audit logs. |
| AuditFileNames | Sets which types of activities that should be logged and to which files. |
| LogDir | Sets the directory where Exponential stores the audit log files. |
Changed in Exponential 6.0.15
Settings of this group in the settings files of Exponential 6.0.15 that this page does not describe:
| Setting | File | Default | Description |
|---|---|---|---|
| OnWriteFailure | settings/audit.ini | continue | What to do when the audit cannot write (disk full, permissions): continue the request goes on; the failure is in error.log (AUDIT-UNWRITTEN) and the dashboard warns refuse actions of the "always written at once" kind (ImmediateEvents[]) are refused while their channel cannot be written, so nothing security-relevant happens unrecorded: a POST to a view of AlwaysModules[] by a signed-in user (503 with an error page), a settings write (exp:ini, debug bar), and exp:audit's manage actions (exit 2). Pages, content editing, GET requests, anonymous visitors, reading and verifying the audit are never refused. Each refusal is logged as AUDIT-REFUSED in error.log. Guide: "When the audit cannot write". Default: continue (a full disk must not take the site down). |
| RefuseExemptViews | settings/audit.ini | user/login; user/logout | With refuse: module/view POSTs that are never refused, so people can still sign in and out (their records go to error.log as AUDIT-UNWRITTEN). |
In this section
Contributors
- Julia Shymova
- Graham Brookins Updated
Comments
Add a comment