Percona audit filter and parameter

MongoDB Percona Server for MongoDB
1

Hello,

I’m trying to use filters with auditLog, and I’m currently facing an issue :

I’d like to print only commands like “insert”, “delete”, “update” from a precise database in my log file. I tried few things, but none of them worked out.
I went through Percona and Mongodb doc, and I found out that with Mongo Enterprise I’d have to use “setParameter {auditAuthorizationSuccess: true}” as parameter to get what I want.
But if I try using this in my mongod.conf file, or in command line, I have an error : "Unrecognized option: setParameter { auditAuthorizationSuccess ".
I tried to find anything about it in Persona doc, but I couldn’t find an answer.

Here’s the audit part of my mongod.conf file :

audit:
destination: file
format: JSON
path: /data/log/mongodb/vip-auditLog.json
filter: '{ atype: "authCheck", "users.db": "vip", "param.command": {$in: [ "insert", "delete", "update", "find", "findandmodify" ] } }'
setParameter { auditAuthorizationSuccess: true }

I’m using ubuntu 14.04 LTS.

Could anyone help me out ? :slight_smile:

2

Only entered at the command line when starting a mongod like this

/usr/bin/mongod -f /etc/mongod.conf --auditDestination file --auditFormat JSON --auditPath /var/log/mongodb/audit.json

3

mmarchet,
Thanks for reaching out. From your question, I can infer that our documentation is lacking regarding the audit plugin and its use. As always, we both rely on and value feedback from the community. With that in mind, we would very much welcome your input into how we can get the documentation to a better state. The best method for feedback is our documentation section in Jira

All the best,
Jon

4

Hello,

goldstrike : Thanks for you answer, unfortunately, it doesn’t solve my problem about how “auditAuthorizationSuccess” is implemented with Percona.

jontobs : I’ll have a look at Jira and post my feedback there.

5

Still no news about it ?