Hello.
Could you help me to find possible solutions for my problem?
I have an instance of Apache Artemis with configured audit logging.
logger.org.apache.activemq.audit.base.level=INFO
logger.org.apache.activemq.audit.resource.level=INFO
logger.org.apache.activemq.audit.message.level=INFO
At the same time I configured scrape metrics for monitoring by prometheus using
jmx exporter.
The problem is that "org.apache.activemq.audit.base" logs some useful
information about user connections like "User ... is creating a core consumer
on target ..." and prometheus scraping via jmx at localhost causes tons of
unuseful logs "User anonymous@internal is getting mbean info on target
resource: ..."
2022-04-21 11:59:21,448 INFO [org.apache.activemq.audit.base] AMQ601265:
User
SomeUser(CN=someUser,OU=Confluence,OU=Groups,OU=Root,DC=office,DC=somesite,DC=com)@10.20.31.130:55299
is creating a core consumer on target resource ServerSessionImpl() [with
parameters: [0, some/queue/address, null, 0, false, true, null]]
2022-04-21 11:59:21,450 INFO [org.apache.activemq.audit.base] AMQ601264:
User
SomeUser(CN=someUser,OU=Confluence,OU=Groups,OU=Root,DC=office,DC=somesite,DC=com)@10.20.31.130:55299
gets security check failure:
ActiveMQSecurityException[errorType=SECURITY_EXCEPTION message=AMQ229213: User:
SomeUserdoes not have permission='CONSUME' for queue some/queue/address on
address some/queue/address]
...
2022-04-21 11:00:06,620 INFO [org.apache.activemq.audit.base] AMQ601019:
User anonymous@internal is getting mbean info on target resource:
org.apache.activemq.artemis.core.management.impl.AddressControlImpl@289710d9 []
Is there any solution to turn off logging about jmx usage from localhost
(connector port for remote usage is disabled) but still have useful data about
clients' connections from "org.apache.activemq.audit.base" logger?
Thank you for your time.
--
Regards,
Sergei Vaisman.
