Summary

Usage

 

AuditFileNames[audit_function1]=logfile1

AuditFileNames[audit_function2]=logfile2
...

Description

This directive makes it possible to control which types of activities that should be logged and to which files they should be logged. By default, this configuration array lists all the built-in audit functions along with a default set of corresponding log file names (see below). The target directory of the audit logs is defined by the "LogDir" directive. Note that the master "Audit" configuration directive must be enabled for auditing to work.

The default configuration enables all the built-in audit function and suggests a default set of files:

AuditFileNames[]
AuditFileNames[user-login]=login.log
AuditFileNames[user-failed-login]=failed_login.log
AuditFileNames[content-delete]=content_delete.log
AuditFileNames[content-move]=content_move.log
AuditFileNames[role-change]=role_change.log
AuditFileNames[role-assign]=role_assign.log
AuditFileNames[section-assign]=section_assign.log
AuditFileNames[order-delete]=order_delete.log

Refer to the “Audit trailing” section of the "Features" chapter for more information.

Examples

Example 1

Audit=enabled
LogDir=var/log/audit
AuditFileNames[]
AuditFileNames[user-login]=login.log

With this configuration, the system will only record information about successful login attempts (all other audit functions will be skipped). The information will be put to the "login.log" file located in the "var/log/audit" directory. Each record in the file will contain information about the user's name and ID number, IP address, plus the date and time when the user logged into the system.