Audit logging (Kubernetes)
Audit logging is enabled by default on your Kubernetes deployment instances. You can view audit logs or disable audit logs as needed.
Viewing audit logs
You can view audit logs in the rojacore and ibm-solis-core containers:
- List the containers in the concert namespace:
kubectl get pods -n <concert-ns>Replace <concert-ns> with the Concert namespace.
- List the containers in the Hub namespace:
kubectl get pods -n platform-hub - View the logs in the solis-core containers:
kubectl logs -f <solis-core-pod-name> -n platform-hubReplace <solis-core-pod-name> with the actual pod name from the previous step.
Disabling audit logs
If you need to disable audit logs, complete the following steps:
- Run the following commands to update the app-cfg-cm config maps:
kubectl patch configmap app-cfg-cm -n <concert-namespace> --patch '{"data":{"ACTIVITY_LOGGING_ON":"false"}}' kubectl patch configmap app-cfg-cm -n <hub-namespace> --patch '{"data":{"ACTIVITY_LOGGING_ON":"false"}}'Replace <concert-namespace> with the Concert namespace and <hub-namespace> with the Hub namespace.
- Restart the containers on Hub and Concert namespaces using following command:
kubectl rollout restart deployment -n <concert-namespace> kubectl rollout restart deployment -n <hub-namespace>Replace <concert-namespace> with the Concert namespace and <hub-namespace> with the Hub namespace.