2016-08-15 07:58:18 -04:00
|
|
|
appender.audit_rolling.type = RollingFile
|
|
|
|
appender.audit_rolling.name = audit_rolling
|
2017-01-16 07:40:29 -05:00
|
|
|
appender.audit_rolling.fileName = ${sys:es.logs.base_path}${sys:file.separator}${sys:es.logs.cluster_name}_access.log
|
2016-08-15 07:58:18 -04:00
|
|
|
appender.audit_rolling.layout.type = PatternLayout
|
|
|
|
appender.audit_rolling.layout.pattern = [%d{ISO8601}] %m%n
|
2017-01-16 07:40:29 -05:00
|
|
|
appender.audit_rolling.filePattern = ${sys:es.logs.base_path}${sys:file.separator}${sys:es.logs.cluster_name}_access-%d{yyyy-MM-dd}.log
|
2016-08-15 07:58:18 -04:00
|
|
|
appender.audit_rolling.policies.type = Policies
|
|
|
|
appender.audit_rolling.policies.time.type = TimeBasedTriggeringPolicy
|
|
|
|
appender.audit_rolling.policies.time.interval = 1
|
|
|
|
appender.audit_rolling.policies.time.modulate = true
|
|
|
|
|
2016-09-13 22:47:10 -04:00
|
|
|
logger.xpack_security_audit_logfile.name = org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail
|
2016-08-15 07:58:18 -04:00
|
|
|
logger.xpack_security_audit_logfile.level = info
|
|
|
|
logger.xpack_security_audit_logfile.appenderRef.audit_rolling.ref = audit_rolling
|
|
|
|
logger.xpack_security_audit_logfile.additivity = false
|