Enable audit log

[Sebastian Albrecht]

Hi,
i am using cassandra 4.1 and i want activate audit logging. I set the
following values in cassandra.yml and expect that logging starts after the
next cassandra start:
audit_logging_options:
  enabled: true
  logger:
- class_name: FileAuditLogger
  included_categories: DCL, ERROR, AUTH

After startup it is also logging: AuditLogManager.java:77 - Audit logging
is enabled.
But when i emit an event that should appear in the audit log (i.e. try
login with wrong password), i do not see it. I have to explicitly enable it
via nodetool for the audit logs to be seen. After cassandra restart it
seems to be disabled again.
Anyone also came across that?

Thx,
Sebastian.

Re: Enable audit log

[Štefan Miklošovič]

Hi Sebastian,

the behaviour you see seems to be a conscious decision:

https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/audit/AuditLogManager.java#L204

On Tue, Jan 14, 2025 at 4:21 PM Sebastian Albrecht <
sebastian.albre...@agido.com> wrote:

> Hi,
> i am using cassandra 4.1 and i want activate audit logging. I set the
> following values in cassandra.yml and expect that logging starts after the
> next cassandra start:
> audit_logging_options:
>   enabled: true
>   logger:
> - class_name: FileAuditLogger
>   included_categories: DCL, ERROR, AUTH
>
> After startup it is also logging: AuditLogManager.java:77 - Audit logging
> is enabled.
> But when i emit an event that should appear in the audit log (i.e. try
> login with wrong password), i do not see it. I have to explicitly enable it
> via nodetool for the audit logs to be seen. After cassandra restart it
> seems to be disabled again.
> Anyone also came across that?
>
> Thx,
> Sebastian.
>

Re: Enable audit log

[Dmitry Konstantinov]

Hi all,

>
https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/audit/AuditLogManager.java#L204

I suppose this logic should work during a startup:
https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/audit/AuditLogManager.java#L109
, shouldn't?
It would be very strange to have it as an expected behavior: to manually
enable audit every time after a startup when it is configured as enabled in
a config file..
Sebastian, what is the exact version of Cassandra you use?

> But when i emit an event that should appear in the audit log (i.e. try
login with wrong password), i do not see it
Sebastian, how do you check the event presence in the log?

Regards,
Dmitry

On Tue, 14 Jan 2025 at 15:41, Štefan Miklošovič 
wrote:

> Hi Sebastian,
>
> the behaviour you see seems to be a conscious decision:
>
>
> https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/audit/AuditLogManager.java#L204
>
> On Tue, Jan 14, 2025 at 4:21 PM Sebastian Albrecht <
> sebastian.albre...@agido.com> wrote:
>
>> Hi,
>> i am using cassandra 4.1 and i want activate audit logging. I set the
>> following values in cassandra.yml and expect that logging starts after the
>> next cassandra start:
>> audit_logging_options:
>>   enabled: true
>>   logger:
>> - class_name: FileAuditLogger
>>   included_categories: DCL, ERROR, AUTH
>>
>> After startup it is also logging: AuditLogManager.java:77 - Audit logging
>> is enabled.
>> But when i emit an event that should appear in the audit log (i.e. try
>> login with wrong password), i do not see it. I have to explicitly enable it
>> via nodetool for the audit logs to be seen. After cassandra restart it
>> seems to be disabled again.
>> Anyone also came across that?
>>
>> Thx,
>> Sebastian.
>>
>

-- 
Dmitry Konstantinov

Re: Enable audit log

[Jeff Jirsa]

Surprising. Feels like something that should change. If it’s enabled in yaml, 
why WOULDNT we want it started on start? 



> On Jan 14, 2025, at 7:40 AM, Štefan Miklošovič  wrote:
> 
> Hi Sebastian,
> 
> the behaviour you see seems to be a conscious decision:
> 
> https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/audit/AuditLogManager.java#L204
> 
> On Tue, Jan 14, 2025 at 4:21 PM Sebastian Albrecht 
> mailto:sebastian.albre...@agido.com>> wrote:
>> Hi,
>> i am using cassandra 4.1 and i want activate audit logging. I set the 
>> following values in cassandra.yml and expect that logging starts after the 
>> next cassandra start:
>> audit_logging_options:
>>   enabled: true
>>   logger:
>> - class_name: FileAuditLogger
>>   included_categories: DCL, ERROR, AUTH
>>  
>> After startup it is also logging: AuditLogManager.java:77 - Audit logging is 
>> enabled.
>> But when i emit an event that should appear in the audit log (i.e. try login 
>> with wrong password), i do not see it. I have to explicitly enable it via 
>> nodetool for the audit logs to be seen. After cassandra restart it seems to 
>> be disabled again.
>> Anyone also came across that?
>> 
>> Thx,
>> Sebastian.

Re: Enable audit log

[Andrew Weaver]

I can confirm that on 4.0.x it works as expected because we use this
extensively.

On Tue, Jan 14, 2025, 10:00 AM Jeff Jirsa  wrote:

> Surprising. Feels like something that should change. If it’s enabled in
> yaml, why WOULDNT we want it started on start?
>
>
>
> On Jan 14, 2025, at 7:40 AM, Štefan Miklošovič 
> wrote:
>
> Hi Sebastian,
>
> the behaviour you see seems to be a conscious decision:
>
>
> https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/audit/AuditLogManager.java#L204
>
> On Tue, Jan 14, 2025 at 4:21 PM Sebastian Albrecht <
> sebastian.albre...@agido.com> wrote:
>
>> Hi,
>> i am using cassandra 4.1 and i want activate audit logging. I set the
>> following values in cassandra.yml and expect that logging starts after the
>> next cassandra start:
>> audit_logging_options:
>>   enabled: true
>>   logger:
>> - class_name: FileAuditLogger
>>   included_categories: DCL, ERROR, AUTH
>>
>> After startup it is also logging: AuditLogManager.java:77 - Audit logging
>> is enabled.
>> But when i emit an event that should appear in the audit log (i.e. try
>> login with wrong password), i do not see it. I have to explicitly enable it
>> via nodetool for the audit logs to be seen. After cassandra restart it
>> seems to be disabled again.
>> Anyone also came across that?
>>
>> Thx,
>> Sebastian.
>>
>
>

UNSUBSCRIBE

[A via user]

UNSUBSCRIBE


Sent from Yahoo Mail for iPhone


On Monday, January 13, 2025, 10:43 PM, Bret McGuire  
wrote:


The Cassandra team is pleased to announce the release of Cassandra Java

Driver version 3.12.0.  This is the first release of the 3.x Java driver since 
its donation to the Apache Software Foundation.


The Source release and Binary convenience artifacts are available here: 
https://dlcdn.apache.org/cassandra/cassandra-java-driver/3.12.0/




The Maven artifacts can be found at: 
https://repository.apache.org/content/groups/public/org/apache/cassandra/ under 
names of the form "cassandra-driver-*" (as distinct from "java-driver-*" which 
is used for the 4.x releases).  This release will be mirrored to other 
repositories and should now be available from Maven Central.


The changelog for this release can be found at: 
https://github.com/apache/cassandra-java-driver/tree/3.x/changelog#3120




Thanks all!

Re: UNSUBSCRIBE

[jose farfan]

>
> UNSUBSCRIBE
>
>

Re: UNSUBSCRIBE

[jose farfan]

UNSUBSCRIBE

On Tue, 14 Jan 2025 at 19:32, A via user  wrote:

> UNSUBSCRIBE
>
>
> Sent from Yahoo Mail for iPhone
> 
>
> On Monday, January 13, 2025, 10:43 PM, Bret McGuire <
> bret.mcgu...@gmail.com> wrote:
>
> The Cassandra team is pleased to announce the release of Cassandra Java
>
> Driver version 3.12.0.  This is the first release of the 3.x Java driver
> since its donation to the Apache Software Foundation.
>
> The Source release and Binary convenience artifacts are available here:
> https://dlcdn.apache.org/cassandra/cassandra-java-driver/3.12.0/
>
>
> The Maven artifacts can be found at:
> https://repository.apache.org/content/groups/public/org/apache/cassandra/
> under names of the form "cassandra-driver-*" (as distinct from
> "java-driver-*" which is used for the 4.x releases).  This release will
> be mirrored to other repositories and should now be available from Maven
> Central.
>
> The changelog for this release can be found at:
> https://github.com/apache/cassandra-java-driver/tree/3.x/changelog#3120
>
>
> Thanks all!
>
>