https://github.com/pgaudit/pgaudit_analyze

PostgreSQL Audit Analyzer
https://github.com/pgaudit/pgaudit_analyze

audit database pgaudit postgresql

Last synced: 20 days ago
JSON representation

PostgreSQL Audit Analyzer

• Host: GitHub
• URL: https://github.com/pgaudit/pgaudit_analyze
• Owner: pgaudit
• License: other
• Created: 2016-11-10T21:08:46.000Z (about 8 years ago)
• Default Branch: main
• Last Pushed: 2024-10-31T22:56:53.000Z (2 months ago)
• Last Synced: 2024-12-07T05:30:12.883Z (about 1 month ago)
• Topics: audit, database, pgaudit, postgresql
• Language: Perl
• Homepage:
• Size: 42 KB
• Stars: 42
• Watchers: 9
• Forks: 13
• Open Issues: 10
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# pgAudit Analyze 
 Open Source PostgreSQL pgAudit Analyzer

## Introduction

The PostgreSQL Audit extension (pgAudit) provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. However, logs are not the ideal place to store audit information. The PostgreSQL Audit Log Analyzer (pgAudit Analyze) reads audit entries from the PostgreSQL logs and loads them into a database schema to aid in analysis and auditing.

## Installation

* Install pgAudit following the instructions included with the extension.

* Update the log settings in `postgresql.conf` as follows:

```

log_destination = 'csvlog'

logging_collector = on

log_connections = on

```

The log files must end with `.csv` and follow a naming convention that ensures files will sort alphabetically with respect to creation time. Log location is customizable when calling pgAudit Analyze.

* Install pgAudit Analyze:

Copy the bin and lib directories to any location you prefer but make sure they are in the same directory.

* Execute audit.sql in the database you want to audit as `postgres`:

```

psql -U postgres -f sql/audit.sql 

```

## Running

pgAudit Analyze is intended to be run as a daemon process.

```

./pgaudit_analyze --daemon /path/to/log/files

```

## Testing

Regression tests are located in the `test` directory. See `test/README.md` for more information.

## Caveats

* The pgaudit.logon table contains the logon information for users of the database. If a user is renamed they must also be renamed in this table or the logon history will be lost.

* Reads and writes to the pgAudit schema by the user running pgAudit Analyze are never logged.

## Author

The PostgreSQL Audit Log Analyzer was written by David Steele.