Re: PostgreSQL Audit Extension - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: PostgreSQL Audit Extension
Date
Msg-id 20160205190843.GY3331@tamriel.snowman.net
Whole thread Raw
In response to Re: PostgreSQL Audit Extension  (Joe Conway <mail@joeconway.com>)
List pgsql-hackers
* Joe Conway (mail@joeconway.com) wrote:
> On 02/05/2016 10:16 AM, Stephen Frost wrote:
> > An in-core auditing solution would provide us with proper grammar
> > support, ability to directly mark objects for auditing in the catalog,
> > allow us to much more easily maintain auditing capability over time as
> > a small incremental bit of work for each new feature (with proper
> > in-core infrastructure for it) and generally be a far better technical
> > solution.  Leveraging the GRANT system is quite cute, and does work, but
> > it's certainly non-intuitive and is only because we've got no better
> > way, due to it being implemented as an extension.
>
> I think one additional item needed would be the ability for the audit
> logs to be sent to a different location than the standard logs.

Indeed, reworking the logging to be supportive of multiple destinations
with tagging of the source, etc, has long been a desire of mine (and
others), though that's largely independent of auditing itself.

Thanks!

Stephen

pgsql-hackers by date:

Previous
From: Joe Conway
Date:
Subject: Re: PostgreSQL Audit Extension
Next
From: Robert Haas
Date:
Subject: Re: postgres_fdw join pushdown (was Re: Custom/Foreign-Join-APIs)