Skip to content

Feedback: Audit database commands and connections #3902

Description

@yoavredis

Page https://redis.io/docs/latest/operate/rs/security/audit-events

Hi @kaitlynmichael,

I found a few more misalignments between the API examples and the rladmin examples.
Pasting here the correct rladmin snippets:

  • Configure cluster audit destination:
    The rladmin example was missing the sixth field.
    Here is the full snippet:
    rladmin cluster config auditing db_conns \
    audit_protocol TCP \
    audit_address audit-sink.example.com \
    audit_port \
    audit_reconnect_interval \
    audit_reconnect_max_attempts \
    audit_queue_max_bytes

  • Enable command and connection auditing
    Here is the full rladmin snippet:
    To enable command and connection auditing and configure filters using rladmin:
    rladmin tune db db: audit_settings username_filter usernames application-user
    rladmin tune db db: audit_settings username_filter filter_type inclusive
    rladmin tune db db: audit_settings username_filter allow_while_username_unknown disabled
    rladmin tune db db: audit_settings username_filter enabled enabled
    rladmin tune db db: audit_settings source_ip_filter ip_addresses ""
    rladmin tune db db: audit_settings source_ip_filter cidr_ranges 10.20.0.0/16
    rladmin tune db db: audit_settings source_ip_filter filter_type inclusive
    rladmin tune db db: audit_settings source_ip_filter enabled enabled
    rladmin tune db db: audit_settings max_total_key_bytes 131072
    rladmin tune db db: audit_settings audit_mode connection_and_crud

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions