appsmith icon indicating copy to clipboard operation
appsmith copied to clipboard

Configure events to be logged in Audit Logs

Open infinitetrooper opened this issue 2 years ago • 4 comments

Some customers would like to only log necessary events to Audit logs as they believe some events don't provide value to them. In this scenario, the customer should be able to configure a list of logs that want logged to the Audit Logs database.

infinitetrooper avatar Mar 08 '23 06:03 infinitetrooper

Hello! Existing audit logs are very detailed and very good for troubleshooting. However, for business operations and compliance they are not very convenient. For example, compliance officer may want to know who and when changed clients data in CRM, but they do not need info when one or another page was accessed. So having possibility to chose what kind of events to be logged would be useful.

Eudod avatar Jan 31 '24 15:01 Eudod

I'd love to be able to exclude query execution from the audit log. It's much more of a runtime thing than an audit log thing. That would help keep a lid on the audit log size. One of our projects generates about 20GB of audit log every few months which has filled up the disk as we were not expecting the AppSmith database to grow

geoff-nunan avatar May 31 '24 08:05 geoff-nunan

Request from another user who's using API with username+password auth to fetch tokens. These params are visible in Audit logs and we need a way to disable this at an instance level.

infinitetrooper avatar Sep 06 '24 10:09 infinitetrooper

It would be great to be able to have some sanitisation of sensitive data on the audit logs. We are using firebase username & password authentication which logs all parameters. It'd be great to have a toggle on query level to control logging of the details. Fo us a "audit level" drop down with the following states would do just perfect

  • everything - as at the moment
  • summary - query X' executed by user Xresulted insuccess or false`
  • disabled - not audited at all

At the moment we had to disable the audit logs altogether which is far from ideal.

Thanks!

suavdebird avatar Sep 06 '24 14:09 suavdebird