Skip to content

Commit cc08a54

Browse files
authored
public repo edit
1 parent 241a5c3 commit cc08a54

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/aks/view-master-logs.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -33,11 +33,11 @@ Azure Monitor logs are enabled and managed in the Azure portal. To enable log co
3333

3434
In addition to entries written by Kubernetes, your project's audit logs also have entries from AKS.
3535

36-
Audit logs are recorded into three categories, *kube-audit-admin*, *guard* and *kube-audit*. The *kube-audit* category contains all audit log data for every audit event, including *get*, *list*, *create*, *update*, *delete*, *patch*, and *post*.
36+
Audit logs are recorded into three categories: *kube-audit*, *kube-audit-admin*, and *guard*.
3737

38-
The *kube-audit-admin* category is a subset of the *kube-audit* log category. *kube-audit-admin* reduces the number of logs significantly by excluding the *get* and *list* audit events from the log.
39-
40-
The *guard* category is managed AAD and Azure RBAC audits. Token in, user info out for managed AAD, and access reviews in and out for Azure RBAC.
38+
- The *kube-audit* category contains all audit log data for every audit event, including *get*, *list*, *create*, *update*, *delete*, *patch*, and *post*.
39+
- The *kube-audit-admin* category is a subset of the *kube-audit* log category. *kube-audit-admin* reduces the number of logs significantly by excluding the *get* and *list* audit events from the log.
40+
- The *guard* category is managed Azure AD and Azure RBAC audits. For managed Azure AD: token in, user info out. For Azure RBAC: access reviews in and out.
4141

4242
## Schedule a test pod on the AKS cluster
4343

0 commit comments

Comments
 (0)