Audit log empty in v5.15.

[yubiuser]

Even if not a single domain is audited, the log is completely empty.

Needs investigation.

[pralor-bot]

This issue has been mentioned on Pi-hole Userspace. There might be relevant details there:

https://discourse.pi-hole.net/t/blank-audit-log/57923/4

[yubiuser]

Issue is in FTL

[2022-09-15 23:53:00.949 27981/T27983] API: event-tracking-services.global.commerce-connector.com.fritz.box has been audited.
[2022-09-15 23:53:00.949 27981/T27983] API: firebaselogging.googleapis.com has been audited.
[2022-09-15 23:53:00.949 27981/T27983] API: js.usemessages.com has been audited.
[2022-09-15 23:53:00.949 27981/T27983] API: js.hsforms.net has been audited.
[2022-09-15 23:53:00.949 27981/T27983] API: fundingchoicesmessages.google.com has been audited.
[2022-09-15 23:53:00.949 27981/T27983] API: prophet.heise.de has been audited.
[2022-09-15 23:53:00.949 27981/T27983] API: tribl.io has been audited.
[2022-09-15 23:53:00.949 27981/T27983] API: cf.iadsdk.apple.com has been audited.
[2022-09-15 23:53:00.949 27981/T27983] API: iadsdk.apple.com has been audited.
[2022-09-15 23:53:00.949 27981/T27983] API: cdn.parsely.com has been audited.
[2022-09-15 23:53:00.950 27981/T27983] API: clc.stackoverflow.com has been audited.
[2022-09-15 23:53:00.950 27981/T27983] API: stats.wp.com has been audited.
[2022-09-15 23:53:00.950 27981/T27983] API: stats.wp.com.fritz.box has been audited.
[2022-09-15 23:53:00.950 27981/T27983] API: collector.githubapp.com has been audited.
[2022-09-15 23:53:00.950 27981/T27983] API: arc.msn.com has been audited.
[2022-09-15 23:53:00.950 27981/T27983] API: cookie-cdn.cookiepro.com has been audited.
^C
rockpi@rockpi-4b:~$ pihole-FTL sqlite3 /etc/pihole/gravity.db "Select * from domain_audit"
1|signaler-pa.clients6.google.com|1657973583
2|prophet.heise.de|1657973586

[pralor-bot]

This issue has been mentioned on Pi-hole Userspace. There might be relevant details there:

https://discourse.pi-hole.net/t/empty-audit-log-and-blocklist-not-working/57975/2

[rube200]

I'm having the same problem. It starts some weeks ago after a update, currently i have the latest version installed (v5.18.1).

root@Host:~# echo ">top-domains for audit >quit" | nc -v 127.0.0.1 4711
Connection to 127.0.0.1 4711 port [tcp/*] succeeded!

root@Host:~# echo ">top-domains >quit" | nc -v 127.0.0.1 4711
Connection to 127.0.0.1 4711 port [tcp/*] succeeded!
0 370 raw.githubusercontent.com
1 293 grafana.com
2 202 lb._dns-sd._udp.0.1.168.192.in-addr.arpa
3 198 discord.com
4 190 lb._dns-sd._udp.0.0.0.100.in-addr.arpa
5 187 lb._dns-sd._udp.198.6.126.100.in-addr.arpa
6 186 www.google.com
7 183 graph.facebook.com
8 178 lb._dns-sd._udp.lan
9 151 teams.events.data.microsoft.com

[Eddie-BS]

Same problem here, since a week or so, after updating pihole. the audit log is empty

Pi-hole v5.12.2 FTL v5.18.1 Web Interface v5.15.1

[Hekzory]

Same issue. Is there a way to temporarily downgrade to older version of ftl until it's fixed? Liked that feature a lot

Pi-hole v5.12.2 FTL v5.18.1 Web Interface v5.15.1

[GvY85]

Same problem here

Debug log: https://tricorder.pi-hole.net/dOD6uq8X/

[DL6ER]

Sorry for the massive delay - I just found the time to work on this (and, yes, I forgot about it meanwhile so thanks for the reminders @Copysiper @GvY85). This bug is an unintended side-effect of https://github.com/pi-hole/FTL/pull/1409.

Please try

pihole checkout ftl fix/audit_log

and report back if this restores the audit log feature for you.

[Eddie-BS]

YES, this brings me info in the audit log screen !

[Eddie-BS]

will this pihole checkout ftl fix/audit_log automaticly change back to "master" or do I/we need to do something ?

[Hekzory]

Yes, that fix worked properly, thank you!

[yubiuser]

automaticly change back to "master"

No.You need to change back to master by pihole checkout ftl master before performing the next Pi-hole update

[pralor-bot]

This issue has been mentioned on Pi-hole Userspace. There might be relevant details there:

https://discourse.pi-hole.net/t/audit-log-is-empty/58395/2

[pralor-bot]

This issue has been mentioned on Pi-hole Userspace. There might be relevant details there:

https://discourse.pi-hole.net/t/auditlog-leer/58416/2

[yubiuser]

Fixed with https://github.com/pi-hole/FTL/releases/tag/v5.18.2