<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Anybody using <a href="http://docs.openstack.org/developer/keystonemiddleware/audit.html" class="">http://docs.openstack.org/developer/keystonemiddleware/audit.html</a> ??<div class=""><br class=""></div><div class=""><br class=""><div class=""><br class=""></div><div class=""><br class=""><div style=""><blockquote type="cite" class=""><div class="">On 17 Nov. 2016, at 11:51 am, Kris G. Lindgren <<a href="mailto:klindgren@godaddy.com" class="">klindgren@godaddy.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">I need to do a deeper dive on audit logging. <br class=""><br class="">However, we have a requirement for when someone changes a security group that we log what the previous security group was and what the new security group is and who changed it.  I don’’t know if this is specific to our crazy security people or if others security peoples want to have this.  I am sure I can think of others.<br class=""><br class=""><br class="">___________________________________________________________________<br class="">Kris Lindgren<br class="">Senior Linux Systems Engineer<br class="">GoDaddy<br class=""><br class="">On 11/16/16, 3:29 PM, "Tom Fifield" <<a href="mailto:tom@openstack.org" class="">tom@openstack.org</a>> wrote:<br class=""><br class="">    Hi Ops,<br class=""><br class="">    Was chatting with Department of Defense in Australia the other day, and <br class="">    one of their pain points is Audit Logging. Some bits of OpenStack just <br class="">    don't leave enough information for proper audit. So, thought it might be <br class="">    a good idea to gather people who are interested to brainstorm how to get <br class="">    it to a good level for all :)<br class=""><br class="">    Does your cloud need good audit logging? What do you wish was there at <br class="">    the moment, but isn't?<br class=""><br class=""><br class="">    Regards,<br class=""><br class=""><br class="">    Tom<br class=""><br class="">    _______________________________________________<br class="">    OpenStack-operators mailing list<br class="">    <a href="mailto:OpenStack-operators@lists.openstack.org" class="">OpenStack-operators@lists.openstack.org</a><br class="">    <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br class=""><br class=""><br class="">_______________________________________________<br class="">OpenStack-operators mailing list<br class=""><a href="mailto:OpenStack-operators@lists.openstack.org" class="">OpenStack-operators@lists.openstack.org</a><br class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators<br class=""></div></div></blockquote></div><br class=""></div></div></body></html>