StorageGRID audit logs are divided into multiple files
Applies to
NetApp StorageGRID
Issue
Multiple audit.log files are saved each day while 3rd party end client application only checks a single log file per day
Example:
admin@sg-admin:~ $ ls -lshtr /var/local/audit/export/ 92M -rw-r -- r -- 1 ams-user bycast 92M Dec 25 00:10 2023-12-25.txt.gz 91M -rw-r -- r -- 1 ams-user bycast 91M Dec 25 00:20 2023-12-25.txt.1.gz 14G -rw-r -- r -- 1 ams-user bycast 14G Dec 26 00:00 2023-12-25.txt.2.gz 89M -rw-r -- r -- 1 ams-user bycast 89M Dec 26 00:10 2023-12-26.txt.gz 93M -rw-r -- r -- 1 ams-user bycast 93M Dec 26 00:20 2023-12-26.txt.1.gz 79G -rw-r -- r -- 1 ams-user bycast 79G Dec 27 00:00 2023-12-26.txt.2532M -rw-r -- r -- 1 ams-user bycast 532M Dec 27 00:10 audit. log. 2484M -rw-r -- r -- 1 ams-user bycast 484M Dec 27 00:20 audit. log. 1 15G -rw-r -- r -- 1 ams-user bycast 14G Dec 27 04:37 audit.logExample of required log rotation by application:
admin@sg-admin:~ $ ls -lshtr /var/local/audit/export/ 21G -rw-r -- r -- 1 ams-user bycast 21G Dec 24 00:00 2023-12-23.txt.gz 15G -rw-r -- r -- 1 ams-user bycast 15G Dec 25 00:00 2023-12-24.txt.gz 14G -rw-r -- r -- 1 ams-user bycast 14G Dec 26 00:00 2023-12-25.txt.gz 79G -rw-r -- r -- 1 ams-user bycast 79G Dec 27 00:00 2023-12-26.txt 15G -rw-r -- r -- 1 ams-user bycast 14G Dec 27 04:37 audit.log