Hi all, > https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/audit/AuditLogManager.java#L204
I suppose this logic should work during a startup: https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/audit/AuditLogManager.java#L109 , shouldn't? It would be very strange to have it as an expected behavior: to manually enable audit every time after a startup when it is configured as enabled in a config file.. Sebastian, what is the exact version of Cassandra you use? > But when i emit an event that should appear in the audit log (i.e. try login with wrong password), i do not see it Sebastian, how do you check the event presence in the log? Regards, Dmitry On Tue, 14 Jan 2025 at 15:41, Štefan Miklošovič <smikloso...@apache.org> wrote: > Hi Sebastian, > > the behaviour you see seems to be a conscious decision: > > > https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/audit/AuditLogManager.java#L204 > > On Tue, Jan 14, 2025 at 4:21 PM Sebastian Albrecht < > sebastian.albre...@agido.com> wrote: > >> Hi, >> i am using cassandra 4.1 and i want activate audit logging. I set the >> following values in cassandra.yml and expect that logging starts after the >> next cassandra start: >> audit_logging_options: >> enabled: true >> logger: >> - class_name: FileAuditLogger >> included_categories: DCL, ERROR, AUTH >> >> After startup it is also logging: AuditLogManager.java:77 - Audit logging >> is enabled. >> But when i emit an event that should appear in the audit log (i.e. try >> login with wrong password), i do not see it. I have to explicitly enable it >> via nodetool for the audit logs to be seen. After cassandra restart it >> seems to be disabled again. >> Anyone also came across that? >> >> Thx, >> Sebastian. >> > -- Dmitry Konstantinov