audit trails

[maarten-litmaath]

VO admins should be able to view an audit trail for each account, showing which significant operations were done on the account, when and by which identity or internal process.

VOMS-Admin exposes a single audit trail for the VO, which would also be quite useful to have in addition.

[balciiberk]

As we discussed at the INDIGO IAM Hackathon, it would be sufficient if the audit logs could be separated from the rest of the logs and written in a separate file. With this, multiple OpenSearch Dashboards can be created for each VO's Admins to show them the AUDIT logs only. This would give more flexibility in parsing the logs, too.

[rmiccoli]

This issue has been discussed during IAM Hackathon 2025 and it has been discovered that by mounting a file with this template into the /indigo-iam directory, AUDIT logs are collected in a separated file.