[MXS-421] improved log facility Created: 2015-10-23  Updated: 2018-06-26  Resolved: 2018-06-18

Status: Closed
Project: MariaDB MaxScale
Component/s: Core
Affects Version/s: None
Fix Version/s: 2.3.0

Type: New Feature Priority: Major
Reporter: VAROQUI Stephane Assignee: Johan Wikman
Resolution: Fixed Votes: 1
Labels: None

Sprint: 2017-38, 2017-39, MXS-SPRINT-58, MXS-SPRINT-59, MXS-SPRINT-60

 Description   

Setting of various log facilities

  • Log authentication failure into one facility ( separate auth deny from server vs proxy)
    log_facility_deny_auth=LOG_USER
    log_level_deny_auth=WARNING
  • Log query execution privileges failure into one facility
    log_facility_deny_privileges=LOG_USER
    log_level_deny_privileges=WARNING
  • Log Firewall Filters into one facility
    Log_facility_deny_firewall=LOG_USER
    log_level_deny_firewall=NOTICE

To be compiled with other ideas



 Comments   
Comment by Johan Wikman [ 2015-10-23 ]

Let me rephrase this to ensure that I understood the idea correctly.

So, there should be predefined categories of errors (e.g. authentication failures) and then you could configure that all errors belonging to that category should be logged with a particular facility. From your example:

  • log_facility_deny_auth=LOG_USER

Further, for each category you could also define the severity, failures of that category should be logged with. From your example:

  • log_level_deny_auth=WARNING

That is, all authentication failures should be logged as warnings, using the facility LOG_USER.

Comment by Johan Wikman [ 2015-10-26 ]

Actually, it seems to me that what we are talking about here is not errors (from Maxscale's perspective) but events in which the DBA or end-user might be interested.

For instance, if Maxscale denies access, then Maxscale (is most likely) not malfunctioning, but acting the way it's been configured to act. However, the fact that it denies access may be (and likely is) of interest to he DBA.

So, we need to define a set of events - e.g. access denied - of interest to a DBA and then make it a configuration issue whether they are logged at all and if they are, using what facility and severity.

Comment by Johan Wikman [ 2015-12-03 ]

This is a good idea and should be implemented. Moving to 1.4.

Comment by Johan Wikman [ 2016-03-01 ]

Removing fix version as this will not be in 1.4.

Generated at Thu Feb 08 03:59:09 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.