Difference between revisions of "Fusion Edge Server Audit"

From Fusion Registry Wiki
Jump to navigation Jump to search
(Disabling Audit)
Line 19: Line 19:
 
* Add a final "]" character to the end of the file
 
* Add a final "]" character to the end of the file
 
* Format the JSON for readability/
 
* Format the JSON for readability/
 
== Contents of the Audit File ==
 
The Audit file contains a JSON array of requests.
 
  
 
== Disabling Audit ==
 
== Disabling Audit ==
Line 28: Line 25:
  
 
See the [[Fusion_Edge_Server_Properties|properties page]] for more information.
 
See the [[Fusion_Edge_Server_Properties|properties page]] for more information.
 +
 +
== Contents of the Audit File ==
 +
It is helpful if you have a basic understanding of the JSON format to understand how to parse the Audit file. The file contains a JSON array of items. Each item in the array is a JSON Object, that is encased within "curly braces" { and }.  Each of these items represents a unique logging event in the Edge Server. The following shows an example of one such event:
 +
 +
  {
 +
    "uid": "1948c63d-95ce-4582-a9bb-3e3322fec24e",
 +
    "parent": "e3de1d84-2413-4b7a-ae1d-754ad38d3a9f",
 +
    "process_id": "SDMX_GET",
 +
    "thread": "http-nio-8084-exec-8",
 +
    "event_type": "data",
 +
    "username": "guest",
 +
    "process_start": 1699023147303,
 +
    "process_end": 1699023147342,
 +
    "duration": 39,
 +
    "status": 200,
 +
    "properties": {
 +
      "Cache": "miss",
 +
      "ResponseFormat": "Structure Specific (Compact) 2.1"
 +
    }
 +
  }
 +
 +
 +
aa

Revision as of 10:01, 17 January 2024

This page explains details the Audit capabilities of Fusion Edge Server.

Audit File

All Audit information from Fusion Edge Server is written to Audit files which are located in the "Audit" sub-folder of your Edge Server Directory. Audit files are named according to the format:

 EdgeServerAudit_<launch time>_<log index>.json

For example:

 EdgeServerAudit_1704067199000_1.json

The "launch time" value represents the time when the Edhe Server was started. However, this value is expressed as a lengthy numerical figure, indicating the time in milliseconds since 1970.

Audit information will be written to this file until either the Edge Server is terminated or the file reaches the file limit of 10Mb in size. If the file limit is reached, a new file is created with the next incremental Log Index value. Log files that are actively being written to may be "locked" by your Operating System until either the Edge Server is terminated or a new log file is started.

Each Audit file contains JSON, but this is not formatted for ease of reaability. Until the file is "completed", either by termination of the Edge Server, or by a new log file being started, a final closing brace character "]" is required to make the file contents become valid JSON. So you may find that if you wish to look at the currently being written Audit file you have to:

  • Create a copy of the Audit file
  • Open this copy in the editor of your choice (for example Notepad++)
  • Add a final "]" character to the end of the file
  • Format the JSON for readability/

Disabling Audit

Auditing can be disabled by modifying the Edge Server properties file and adding the entry:

 audit.disabled=true

See the properties page for more information.

Contents of the Audit File

It is helpful if you have a basic understanding of the JSON format to understand how to parse the Audit file. The file contains a JSON array of items. Each item in the array is a JSON Object, that is encased within "curly braces" { and }. Each of these items represents a unique logging event in the Edge Server. The following shows an example of one such event:

 {
   "uid": "1948c63d-95ce-4582-a9bb-3e3322fec24e",
   "parent": "e3de1d84-2413-4b7a-ae1d-754ad38d3a9f",
   "process_id": "SDMX_GET",
   "thread": "http-nio-8084-exec-8",
   "event_type": "data",
   "username": "guest",
   "process_start": 1699023147303,
   "process_end": 1699023147342,
   "duration": 39,
   "status": 200,
   "properties": {
     "Cache": "miss",
     "ResponseFormat": "Structure Specific (Compact) 2.1"
   }
 }


aa