audit trails
maarten-litmaath opened this issue · comments
VO admins should be able to view an audit trail for each account, showing which significant operations were done on the account, when and by which identity or internal process.
VOMS-Admin exposes a single audit trail for the VO, which would also be quite useful to have in addition.
As we discussed at the INDIGO IAM Hackathon, it would be sufficient if the audit logs could be separated from the rest of the logs and written in a separate file. With this, multiple OpenSearch Dashboards can be created for each VO's Admins to show them the AUDIT logs only. This would give more flexibility in parsing the logs, too.