Skip to content

Commit

Permalink
docs: fix example audit log directory structure (#51207)
Browse files Browse the repository at this point in the history
These docs have been incorrect since we introduced an NFS-friendly
audit log directory structure in #1549.

Note: our audit log is very much NOT NFS-friendly, despite the intent
of that old PR.
  • Loading branch information
zmb3 authored Jan 22, 2025
1 parent c80c3c7 commit 23a1d2d
Showing 1 changed file with 10 additions and 8 deletions.
18 changes: 10 additions & 8 deletions docs/pages/reference/monitoring/audit.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -58,17 +58,19 @@ more information on how to configure the audit log, refer to the `storage`
section of the example configuration file in the
[Teleport Configuration Reference](../config.mdx).

Let's examine the Teleport audit log using the `dir` backend. The event log is
stored in Teleport's data dir under the `log` directory. This is usually
`/var/lib/teleport/log`. Each day is represented as a file:
Let's examine the Teleport audit log using the `dir` backend. Teleport Auth
Service instances write their logs to a subdirectory of Teleport's configured
data directory that is named based on the service's UUID.

Each day is represented as a file:

```code
$ ls -l /var/lib/teleport/log/
$ ls -l /var/lib/teleport/log/bbdfe5be-fb97-43af-bf3b-29ef2e302941
# total 104
# -rw-r----- 1 root root 31638 Jan 22 20:00 2017-01-23.00:00:00.log
# -rw-r----- 1 root root 91256 Jan 31 21:00 2017-02-01.00:00:00.log
# -rw-r----- 1 root root 15815 Feb 32 22:54 2017-02-03.00:00:00.log
# -rw-r----- 1 root root 31638 Jan 22 20:00 2022-01-23.00:00:00.log
# -rw-r----- 1 root root 91256 Jan 31 21:00 2022-02-01.00:00:00.log
# -rw-r----- 1 root root 15815 Feb 32 22:54 2022-02-03.00:00:00.log
```

</TabItem>
Expand All @@ -77,7 +79,7 @@ $ ls -l /var/lib/teleport/log/
Teleport Enterprise Cloud manages the storage of audit logs for you. You can
access your audit logs via the Teleport Web UI by clicking:

**Activity** > **Audit Log**
**Audit** > **Audit Log**

</TabItem>
</Tabs>
Expand Down

0 comments on commit 23a1d2d

Please sign in to comment.