mirror of
https://github.com/scylladb/scylladb.git
synced 2026-05-22 07:42:16 +00:00
9646ee05bd
Prepare API in audit for auditing Alternator. The API provides an externally-callable functions `inspect()`, for both CQL and Alternator. Both variants of the function would unpack parameters and merge into calling a common `maybe_log()`, which can then call `log()` when conditions are met. Also, while I was at it, (const) references were favoured over raw pointers. The Alternator audit_info subclass (audit_info_alternator) carries an optional consistency level — only data read/write operations have a meaningful CL, while DDL and metadata queries store an empty string in the audit table and syslog (matching the existing write_login behavior). The storage helpers are updated accordingly. Add a will_log(category, keyspace, table) method that checks whether an operation should be audited (category check AND keyspace/table filtering) without requiring a constructed audit_info object. should_log() delegates to will_log().
48 lines
1.3 KiB
C++
48 lines
1.3 KiB
C++
/*
|
|
* Copyright (C) 2017 ScyllaDB
|
|
*/
|
|
|
|
/*
|
|
* SPDX-License-Identifier: LicenseRef-ScyllaDB-Source-Available-1.1
|
|
*/
|
|
#pragma once
|
|
|
|
#include <seastar/net/api.hh>
|
|
|
|
#include "audit/audit.hh"
|
|
#include "storage_helper.hh"
|
|
#include "db/config.hh"
|
|
|
|
namespace service {
|
|
|
|
class migration_manager;
|
|
|
|
};
|
|
|
|
namespace audit {
|
|
|
|
class audit_syslog_storage_helper : public storage_helper {
|
|
socket_address _syslog_address;
|
|
net::datagram_channel _sender;
|
|
seastar::semaphore _semaphore;
|
|
|
|
future<> syslog_send_helper(seastar::temporary_buffer<char> msg);
|
|
public:
|
|
explicit audit_syslog_storage_helper(cql3::query_processor&, service::migration_manager&);
|
|
virtual ~audit_syslog_storage_helper();
|
|
virtual future<> start(const db::config& cfg) override;
|
|
virtual future<> stop() override;
|
|
virtual future<> write(const audit_info* audit_info,
|
|
socket_address node_ip,
|
|
socket_address client_ip,
|
|
std::optional<db::consistency_level> cl,
|
|
const sstring& username,
|
|
bool error) override;
|
|
virtual future<> write_login(const sstring& username,
|
|
socket_address node_ip,
|
|
socket_address client_ip,
|
|
bool error) override;
|
|
};
|
|
|
|
}
|