Peter Wilson
Peter Wilson
This PR is intended to remove the direct dependency within Vault on [armon/go-metrics](https://github.com/hashicorp/go-metrics) in favor of [hashicorp/go-metrics](https://github.com/hashicorp/go-metrics). This should make life easier when we want to update versions going foward....
This PR adjusts the behavior of the `handleAuditNonLogical` func such that if an HTTP response is an error, we don't attempt to audit the response as it has already failed...
WIP This PR documents the Enterprise-only audit feature named 'exclusion' (see: https://github.com/hashicorp/vault-enterprise/pull/5590)
## Summary This PR changes the behavior of Vault such that when an audit device attempts to log an incoming request which contains the following headers: * `Correlation-ID` * `X-Correlation-ID`...
This PR documents the behavior change and usage for Vault auditing to include `Correlation-ID` and `X-Correlation-ID` headers. Vercel: https://vault-n5poe4e19-hashicorp.vercel.app/vault/docs/audit#audit-request-headers Feature PR: https://github.com/hashicorp/vault/pull/26777 Jira ticket for docs: https://hashicorp.atlassian.net/browse/VAULT-26582
**Enterprise-only feature**: The PR introduces changes required for the Enterprise edition of Vault to exclude fields from the audit entries that appear in an audit log. ENT PR: https://github.com/hashicorp/vault-enterprise/pull/5590
## Issue Summary The [documentation for the AD secrets engine](https://www.vaultproject.io/api-docs/secret/ad#binding-parameters) requires the following: * `binddn` a [distinguished name](https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ldap/distinguished-names) for the object that will be bound when attempting to search AD...
We've had reports where customers see a different output structure in their audit logs depending on whether they are using [`log_raw`](https://developer.hashicorp.com/vault/docs/audit#log_raw) option or not. When raw output is enabled, empty...