Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3
Section
Column

Excerpt

...

Collecting and securing audit trails and making them available for the Get Audit Trails functionality

...

  1. Individual and independent ensurance of audit trails by the individual pillars and clients
  2. Individual ensurance of audit trails via common audit-trail SLA
  3. Let audit trail service pull audit trails and doing the ensurance via audit-trail SLA

Audit-trail SLA


...

The audit trail service is a Reference services which will be part of the reference implementation (other possible implementations are described on Different Audit Trails solutions).

The audit trail service has the responsibilities of:

  • Collecting audit trail from contributors on a regular basis.
  • Exposing the collected audit trails. This includes providing filtering functionality.
  • Securing audit trails for long term storage in a dedicated Special Audit trails Bit Repository Collection, which only contain audit trail information for a file bit repository collection.

This means that Audit Trails clients in most cases can be siplified to just ask this audit trails service for the requested audit trails. Furthermore all ensurance of audit trails are placed as part of the service.

The Audit trail contributors are all the pillars in a collection.

Child pages (Children Display)
depth3
styleh3
excerpttrue

...

Benefits and disadvantages

To support securing of audit trails we use the PutFile functionality along with special AuditTrail-SLAs and to access logs we use the GetFile functionality along with the special AuditTrail-SLAs.The GetAuditTrails Client provides the GetAuditTrail functionality to the user.

A special Audit Trails Servcie is responsible for securing audit trails is not in the illustration but is also a possibility.

which asks the pillars and other clients for logs to secure or receives request to secure audit trails from pillars and other clients.

The Get Audit Trail Client collects audit trails from different parts of the bit repository, i.e. audit trails information from pillars, clients, bus, alarms. These audit trails must therefore be secured either on individual initiative or by a dedicated client. The approach described here is that audit trails are ensured by letting pillars and clients secure copies on other pillars according to a Log-SLA. Especially the integrity client is important here.

...

Column
Jira Issues
columnstype,key,summary
width400px
titleOutstanding Audit trail issues
urlhttps://sbforge.org/jira/sr/jira.issueviews:searchrequest-xml/temp/SearchRequest.xml?jqlQuery=project+%3D+BITMAG+AND+resolution+%3D+Unresolved+AND+component+%3D+%22Audit+trail%22+ORDER+BY+priority+DESC&tempMax=1000