With ecAudit you get auditing and query logger functionality for Apache Cassandra 2.2, 3.0 and 3.11.
Features include:
- Detailed audit records for CQL operations and login attempts
- Customizable audit record format
- Obfuscation of sensitive password information
- Powerful filtering with centralized or local whitelists
- Logger backends with SLF4J/Logback or Chronicle
Example of audit records created by ecAudit:
15:42:41.644 - client:'127.0.0.1'|user:'cassandra'|status:'ATTEMPT'|operation:'INSERT INTO ecks.ectbl (partk, clustk, value) VALUES (?, ?, ?)[1, '1', 'valid']'
15:42:41.646 - client:'127.0.0.1'|user:'cassandra'|status:'ATTEMPT'|operation:'SELECT * FROM ecks.ectbl WHERE partk = ?[1]'
15:42:41.650 - client:'127.0.0.1'|user:'cassandra'|status:'ATTEMPT'|operation:'DELETE FROM ecks.ectbl WHERE partk = ?[1]'
15:42:41.651 - client:'127.0.0.1'|user:'cassandra'|status:'ATTEMPT'|operation:'INSERT INTO ecks.ectbl (partk, clustk, value) VALUES (?, ?, ?)[2, '2', 'valid']'
15:42:41.653 - client:'127.0.0.1'|user:'cassandra'|status:'ATTEMPT'|operation:'SELECT * FROM ecks.ectbl WHERE partk = ?[2]'
15:42:41.655 - client:'127.0.0.1'|user:'cassandra'|status:'ATTEMPT'|operation:'DELETE FROM ecks.ectbl WHERE partk = ?[2]'
Checkout the detailed description for a more comprehensive list of features, limitations and operational impact.
ecAudit integrates with Apache Cassandra using its existing plug-in points.
Official releases of ecAudit can be downloaded from Maven Central. Get the ecAudit flavor for your Cassandra version.
For a detailed description of compatible Cassandra versions, refer to the Cassandra Compatibility Matrix.
Install and configure ecAudit using the setup guide for your Cassandra version.
- ecAudit Setup Guide for Cassandra 3.11.<latest>
- ecAudit Setup Guide for Cassandra 3.0.<latest>
- ecAudit Setup Guide for Cassandra 3.0.11
- ecAudit Setup Guide for Cassandra 2.2.<latest>
Report an issue if you're having trouble to use ecAudit or have an idea for an improvement.
Want to contribute to ecAudit? Check out our contribution guide.
The following Ericsson developers contributed to the initial ecAudit project:
- Per Otterström
- Tobias Eriksson
- Laxmikant Upadhyay
- Anuj Wadhera
- Marcus Olsson
- Ted Petersson
Copyright 2018-19 Telefonaktiebolaget LM Ericsson
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.