<html><body><div style="font-family: courier new,courier,monaco,monospace,sans-serif; font-size: 10pt; color: #000000"><div><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;">Hi,</span></div><div><br data-mce-bogus="1"></div><div><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;">I am using pike version.</span></div><div><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;">I have configured nova service as mentioned in </span></div><div><br data-mce-bogus="1"></div><div><span style="font-size: 13.3333px; font-family: "times new roman", "new york", times, serif;" data-mce-style="font-size: 13.3333px; font-family: 'times new roman', 'new york', times, serif;">https://docs.openstack.org/keystonemiddleware/pike/audit.html</span><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;">1. added in api-paste.ini file </span></div><div><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;"><span data-mce-bogus="1" data-mce-type="format-caret"><span data-mce-bogus="1" data-mce-type="format-caret"><strong> <!--StartFragment--></strong></span></span></span><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; display: block; padding: 20px 30px; margin: 0px 0px 10px; line-height: 1.42857; color: #ffffff; word-break: break-all; overflow-wrap: break-word; background-color: #333333; border: 1px solid #cccccc; border-radius: 4px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" data-mce-style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 13px; display: block; padding: 20px 30px; margin: 0px 0px 10px; line-height: 1.42857; color: #ffffff; word-break: break-all; overflow-wrap: break-word; background-color: #333333; border: 1px solid #cccccc; border-radius: 4px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;"><span class="p" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">[</span><span class="nb" style="box-sizing: border-box; color: #24909d;" data-mce-style="box-sizing: border-box; color: #24909d;">filter</span><span class="p" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">:</span><span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">audit</span><span class="p" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">]</span>
<span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">paste</span><span class="o" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">.</span><span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">filter_factory</span> <span class="o" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">=</span> <span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">keystonemiddleware</span><span class="o" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">.</span><span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">audit</span><span class="p" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">:</span><span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">filter_factory</span>
<span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">audit_map_file</span> <span class="o" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">=</span> <span class="o" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">/</span><span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">etc</span><span class="o" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">/</span><span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">nova</span><span class="o" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">/</span><span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">api_audit_map</span><span class="o" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">.</span><span class="n" style="box-sizing: border-box; color: #d0d0d0;" data-mce-style="box-sizing: border-box; color: #d0d0d0;">conf</span></span></pre><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;"><strong><!--EndFragment--> </strong></span></div><div><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;">2. <span style="font-size: 10pt;" data-mce-style="font-size: 10pt;">verified <span style="background-color: rgb(244, 244, 244); color: rgb(22, 22, 22); letter-spacing: 0.32px;" data-mce-style="background-color: #f4f4f4; color: #161616; letter-spacing: 0.32px;"></span><code data-mce-style="color: #161616; font-style: inherit; font-variant: inherit; letter-spacing: 0.32px; box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-stretch: inherit; line-height: 1rem; vertical-align: baseline; overflow: hidden;" style="color: rgb(22, 22, 22); font-style: inherit; font-variant: inherit; letter-spacing: 0.32px; box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-stretch: inherit; line-height: 1rem; vertical-align: baseline; overflow: hidden;">composite:openstack_compute_api_v2 section.</code><!--EndFragment--></span></span></div><div><span style="font-family: "times new roman", "new york", times, serif; font-size: 10pt;" data-mce-style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><code data-mce-style="color: #161616; font-style: inherit; font-variant: inherit; letter-spacing: 0.32px; box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-stretch: inherit; line-height: 1rem; vertical-align: baseline; overflow: hidden;" style="color: rgb(22, 22, 22); font-style: inherit; font-variant: inherit; letter-spacing: 0.32px; box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-stretch: inherit; line-height: 1rem; vertical-align: baseline; overflow: hidden;"><code data-mce-style="color: #161616; font-style: inherit; font-variant: inherit; letter-spacing: 0.32px; box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-stretch: inherit; line-height: 1rem; vertical-align: baseline; overflow: hidden;" style="color: rgb(22, 22, 22); font-style: inherit; font-variant: inherit; letter-spacing: 0.32px; box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-stretch: inherit; line-height: 1rem; vertical-align: baseline; overflow: hidden;">3. <span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;"><span style="color: rgb(22, 22, 22); font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; float: none; display: inline !important;" data-mce-style="color: #161616; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; float: none; display: inline !important;">Copied the </span><span class="ph filepath" style="box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-weight: 400; font-stretch: inherit; line-height: inherit; vertical-align: baseline; color: rgb(22, 22, 22); letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" data-mce-style="box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-weight: 400; font-stretch: inherit; line-height: inherit; vertical-align: baseline; color: #161616; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">api_audit_map.conf</span><span style="color: rgb(22, 22, 22); font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; float: none; display: inline !important;" data-mce-style="color: #161616; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; float: none; display: inline !important;"> file to the </span><span class="ph filepath" style="box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-weight: 400; font-stretch: inherit; line-height: inherit; vertical-align: baseline; color: rgb(22, 22, 22); letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" data-mce-style="box-sizing: border-box; margin: 0px; padding: 0px; border: 0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-numeric: inherit; font-variant-east-asian: inherit; font-weight: 400; font-stretch: inherit; line-height: inherit; vertical-align: baseline; color: #161616; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">/etc/nova/</span><!--EndFragment--></span></code></code></span><div style="clear: both;" data-mce-style="clear: both;"><br></div><div style="clear: both;" data-mce-style="clear: both;"><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;">After that I have restared all openstack services.</span></div><div style="clear: both;" data-mce-style="clear: both;"><br data-mce-bogus="1"></div><div style="clear: both;" data-mce-style="clear: both;">But I couldn't find any audit logs with <span style="font-family: "times new roman", "new york", times, serif;">oslo.messaging.notification.audit.http.request in nova.log file</span></div><div style="clear: both;" data-mce-style="clear: both;"><span style="font-family: "times new roman", "new york", times, serif;">I can see only logs related to oslo.messaging as</span><span style="font-family: "times new roman", "new york", times, serif;"></span></div><div style="clear: both;" data-mce-style="clear: both;"><span style="font-family: "times new roman", "new york", times, serif;"><br data-mce-bogus="1"></span></div><div style="clear: both;" data-mce-style="clear: both;"><span style="font-family: "times new roman", "new york", times, serif;"><div style="clear: both;" data-mce-style="clear: both;">openstack nova-scheduler[17534]: INFO oslo.messaging.notification.scheduler.select_destinations.start [None req-01612e5a-37d9-4b62-970a-fcf7d3c409ad admin admin] {"event_type": "scheduler.select_destinations.start", "timestamp": "2021-04-25 11:10:40.249260", "payload": {"request_spec": {"instance_properties": {"root_gb": 1, "uuid": "ee4ddae2-9397-401c-b80f-543061e75dd2", "availability_zone": null, "ephemeral_gb": 0, "numa_topology": null, "memory_mb": 512, "vcpus": 1, "project_id": "d078fd26a1204e6abede5faca777da8b", "pci_requests": {"requests": []}}, "instance_type": {"disabled": false, "root_gb": 1, "name": "m1.tiny", "flavorid": "1", "deleted": false, "created_at": "2021-04-22T17:34:26.000000", "ephemeral_gb": 0, "updated_at": null, "memory_mb": 512, "vcpus": 1, "extra_specs": {}, "swap": 0, "rxtx_factor": 1.0, "is_public": true, "deleted_at": null, "vcpu_weight": 0, "id": 6}, "image": {"status": "active", "name": "cirros-0.3.5-x86_64-disk", "container_format": "bare", "created_at": "2021-04-22T17:32:54.000000", "disk_format": "qcow2", "updated_at": "2021-04-22T17:32:55.000000", "id": "e0d062fa-2b3c-4a6e-90e4-3ef796c3a594", "min_disk": 0, "min_ram": 0, "checksum": "f8ab98ff5e73ebab884d80c9dc9c7290", "owner": "d078fd26a1204e6abede5faca777da8b", "properties": {}, "size": 13267968}, "num_instances": 1}}, "priority": "INFO", "publisher_id": "scheduler.openstack", "message_id": "3128ed95-1599-46f8-b110-93fcb0776812"}</div><div><br></div></span></div></div><div>what I understood that as part of audit middleware, logs should contain <!--StartFragment--><span style="color: #000000; font-family: 'times new roman', 'new york', times, serif; font-size: 13.3333px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;" data-mce-style="color: #000000; font-family: 'times new roman', 'new york', times, serif; font-size: 13.3333px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;"><span style="color: #000000; font-family: 'times new roman', 'new york', times, serif; font-size: 13.3333px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;" data-mce-style="color: #000000; font-family: 'times new roman', 'new york', times, serif; font-size: 13.3333px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;">oslo.messaging.notification.audit.http.request and <!--StartFragment-->oslo.messaging.notification.audit.http.response. Please suggest what I am missing.<!--EndFragment--></span></span><div style="clear: both;" data-mce-style="clear: both;"><br></div></div><div data-marker="__SIG_PRE__"><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;">Thanks,</span><br><span style="font-family: "times new roman", "new york", times, serif;" data-mce-style="font-family: 'times new roman', 'new york', times, serif;">Hanumantha Reddy.</span></div></div></body></html>