Matt Sicker

I already reset my password. Back when I tried to release from Maven, I got 403 errors or something like that. I could try again at some point, though. And...

I haven't had a chance to reset my deployment settings yet.

@davidolorundare you were previously assigned to this issue on JIRA. Would you like to continue it here?

Logging to STDOUT is not supported directly from the UI, no. Typical audit logging should be done to an external append-only data store to prevent tampering with existing audit logs....

The log destination is only used for the JSON layout at the moment (which I now think should probably be reverted to using the syslog layout for compactness; the JSON...

Right, that's why we focused on the syslog socket configuration first as running a syslog daemon has been a standard way to collect logs for decades. Note that I can...

Version 1.1 of the audit plugin (not audio plugin) had an old version of Log4j in it which is affected by CVE-2021-44228. Please make sure to update to the latest...

Removing this from 1.0 as documenting how to use log4j audit with a Jenkins plugin is a bit simpler to define at the moment.

So the IPv6 host gets normalized to its proper IP? I mean, that sort of makes sense to me, though I'm not sure if that behavior would be surprising compared...

The idea for using `Array[InetAddress]` isn't necessary an array, but some sort of collection class in general, though I'm not sure how that'd interact with the normal collection converters.