Audit logging

Resource Manager tracks user actions in audit log files. Resource Manager maintains logged information in a format that is optimized for searching and reporting.

Audit logging information is written to a flat file located on the Control Center master which is located at /var/log/serviced/application-audit.log. The information is also sent to Elasticsearch, which is then viewable through Kibana and can be viewed in the Control Center Logs tab.

The retention rules of the application-audit.log file are governed by the logrotate configuration file located at /opt/serviced/etc/logrotate.conf. For more information on editing the logrotate configuration file, refer to the Control Center Reference Guide.