Uploaded image for project: 'OpenDJ'
  1. OpenDJ
  2. OPENDJ-3555

Syslog audit handler does not publish HTTP events if "topics" parameter contains multiple values

    Details

    • Sprint:
      OpenDJ Sprint 122

      Description

      Found using OpenDJ 4.0.0 rev a50f5f780e7

      Scenario

      • install a server and enable the http connection handler
      • create an "External HTTP Access Log Publisher" with the following configuration
        $ ./dsconfig -h localhost -p 4444 -D "cn=myself" -w password -X create-log-publisher --publisher-name "Syslog HTTP Access Log Publisher" --type external-http-access --set enabled:true --set config-file:/tmp/syslog-handler-config.json -n
        
        {
            "config": {
                "protocol": "TCP",
                "name": "syslog",
                "facility": "LOCAL0",
                "topics": [
                    "http-access",
                    "ldap-access"
                ],
                "enabled": true,
                "host": "localhostl",
                "buffering": {
                    "enabled": false
                },
                "port": 8888,
                "connectTimeout": "30"
            },
            "class": "org.forgerock.audit.handlers.syslog.SyslogAuditEventHandler"
        }
        
      • perform some REST2LDAP requests to generate audit event
        => no HTTP events received on Syslog side
        => if you change the "topics" parameter to have only "http-access" then Syslog correctly receive the HTTP events

        Attachments

          Activity

            People

            • Assignee:
              joseph.de-menditte Joseph de-Menditte
              Reporter:
              csovant Christophe Sovant
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: