<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">This could be an issue auditing failed requests, i.e. when unauthorised requests are made against an api, if I understand correctly, those would be dropped before being put on the queue.<div><br></div><div>Also, I thought that if written as a middleware wsgi component, no modification of the existing code would be necessary, it would just be a change in a config file. Or am I misunderstanding again?</div><div><br></div><div>/Kieran </div><div><div>On 8 Mar 2012, at 02:01, heut2008 wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">May be get user actions from message queue is more efficient,also,in this way,you need not change the nova code.<br><br><div class="gmail_quote">2012/3/7 Kieran Evans <span dir="ltr"><<a href="mailto:keyz182@gmail.com">keyz182@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto; ">Hi There,<br>
<br>
I'm looking at implementing some form of Auditing/logging for various components, with the main aim of having a full audit trail of all user actions, for various legal, and general troubleshooting/support purposes.<br>
<br>
Firstly, I'm wondering if there's already an implementation of something like this, or an effort towards it. I've had a look, but didn't see anything relevant.<br>
<br>
Secondly, I'm trying to work out the best approach to this. My first guess would be a WSGI middleware on all the APIs that logs every request, either to a message queue for log service to pull and put into a DB, or put it directly into a DB.<br>
<br>
If done as middleware, I envisage it being quite a simple, lightweight one, as it only has to pull the needed data from the request before sending it on.<br>
<br>
Any and all comments are welcome, I stumbled onto this idea this morning, so I've only had a few hours thinking about it while working on other things.<br>
<br>
Thanks<br>
/Kieran<br>
_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
</blockquote></div><br>
</blockquote></div><br></body></html>