You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@lucene.apache.org by "Jan Høydahl (Jira)" <ji...@apache.org> on 2019/11/22 23:03:00 UTC
[jira] [Updated] (SOLR-13837) AuditLogger must handle V2 requests
better
[ https://issues.apache.org/jira/browse/SOLR-13837?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jan Høydahl updated SOLR-13837:
-------------------------------
Description:
Spinoff from SOLR-13741
Turns out that Audit logger does not log the body of V2 Admin API requests and needs a general improvement in how V2 requests are handled, i.e:
* We do not audit log the BODY of the request (which is where the action is)
* We do not detect what collections the request is for (so the AuditEvent#collections array is null)
* -The resource path is internal format {{/____v2/c}} instead of {{/api/c}} (should we convert the prefix in the AuditEvent?)-
was:
Spinoff from SOLR-13741
Turns out that Audit logger does not log the body of V2 Admin API requests and needs a general improvement in how V2 requests are handled, i.e:
* We do not audit log the BODY of the request (which is where the action is)
* We do not detect what collections the request is for (so the AuditEvent#collections array is null)
* The resource path is internal format {{/____v2/c}} instead of {{/api/c}} (should we convert the prefix in the AuditEvent?)
> AuditLogger must handle V2 requests better
> ------------------------------------------
>
> Key: SOLR-13837
> URL: https://issues.apache.org/jira/browse/SOLR-13837
> Project: Solr
> Issue Type: Bug
> Security Level: Public(Default Security Level. Issues are Public)
> Components: Auditlogging
> Affects Versions: 8.2
> Reporter: Jan Høydahl
> Assignee: Jan Høydahl
> Priority: Major
>
> Spinoff from SOLR-13741
> Turns out that Audit logger does not log the body of V2 Admin API requests and needs a general improvement in how V2 requests are handled, i.e:
> * We do not audit log the BODY of the request (which is where the action is)
> * We do not detect what collections the request is for (so the AuditEvent#collections array is null)
> * -The resource path is internal format {{/____v2/c}} instead of {{/api/c}} (should we convert the prefix in the AuditEvent?)-
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org