[
https://issues.apache.org/jira/browse/SOLR-13837?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jan Høydahl updated SOLR-13837:
---
Description:
Spinoff from SOLR-13741
Turns out that Audit logger does not log the body of V2 Admin API requests and
needs a general improvement in how V2 requests are handled, i.e:
* We do not audit log the BODY of the request (which is where the action is)
* We do not detect what collections the request is for (so the
AuditEvent#collections array is null)
* -The resource path is internal format {{/v2/c}} instead of {{/api/c}}
(should we convert the prefix in the AuditEvent?)-
was:
Spinoff from SOLR-13741
Turns out that Audit logger does not log the body of V2 Admin API requests and
needs a general improvement in how V2 requests are handled, i.e:
* We do not audit log the BODY of the request (which is where the action is)
* We do not detect what collections the request is for (so the
AuditEvent#collections array is null)
* The resource path is internal format {{/v2/c}} instead of {{/api/c}}
(should we convert the prefix in the AuditEvent?)
> AuditLogger must handle V2 requests better
> --
>
> Key: SOLR-13837
> URL: https://issues.apache.org/jira/browse/SOLR-13837
> Project: Solr
> Issue Type: Bug
> Security Level: Public(Default Security Level. Issues are Public)
> Components: Auditlogging
>Affects Versions: 8.2
>Reporter: Jan Høydahl
>Assignee: Jan Høydahl
>Priority: Major
>
> Spinoff from SOLR-13741
> Turns out that Audit logger does not log the body of V2 Admin API requests
> and needs a general improvement in how V2 requests are handled, i.e:
> * We do not audit log the BODY of the request (which is where the action is)
> * We do not detect what collections the request is for (so the
> AuditEvent#collections array is null)
> * -The resource path is internal format {{/v2/c}} instead of {{/api/c}}
> (should we convert the prefix in the AuditEvent?)-
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
-
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org
