Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v17] docs: fix example audit log directory structure #51370

Merged
merged 1 commit into from
Jan 23, 2025
Merged

[v17] docs: fix example audit log directory structure #51370

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 10 additions & 8 deletions docs/pages/reference/monitoring/audit.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,17 +58,19 @@ more information on how to configure the audit log, refer to the `storage`
section of the example configuration file in the
[Teleport Configuration Reference](../config.mdx).

Let's examine the Teleport audit log using the `dir` backend. The event log is
stored in Teleport's data dir under the `log` directory. This is usually
`/var/lib/teleport/log`. Each day is represented as a file:
Let's examine the Teleport audit log using the `dir` backend. Teleport Auth
Service instances write their logs to a subdirectory of Teleport's configured
data directory that is named based on the service's UUID.

Each day is represented as a file:

```code
$ ls -l /var/lib/teleport/log/
$ ls -l /var/lib/teleport/log/bbdfe5be-fb97-43af-bf3b-29ef2e302941

# total 104
# -rw-r----- 1 root root 31638 Jan 22 20:00 2017-01-23.00:00:00.log
# -rw-r----- 1 root root 91256 Jan 31 21:00 2017-02-01.00:00:00.log
# -rw-r----- 1 root root 15815 Feb 32 22:54 2017-02-03.00:00:00.log
# -rw-r----- 1 root root 31638 Jan 22 20:00 2022-01-23.00:00:00.log
# -rw-r----- 1 root root 91256 Jan 31 21:00 2022-02-01.00:00:00.log
# -rw-r----- 1 root root 15815 Feb 32 22:54 2022-02-03.00:00:00.log
```

</TabItem>
Expand All @@ -77,7 +79,7 @@ $ ls -l /var/lib/teleport/log/
Teleport Enterprise Cloud manages the storage of audit logs for you. You can
access your audit logs via the Teleport Web UI by clicking:

**Activity** > **Audit Log**
**Audit** > **Audit Log**

</TabItem>
</Tabs>
Expand Down
Loading