|
1 | 1 | <?xml version='1.0' encoding='UTF-8'?> |
2 | 2 | <!DOCTYPE html> |
3 | | -<html xmlns="http://www.w3.org/1999/xhtml" class="chrometwo"><head><title>Audit logs in Red Hat Developer Hub</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css"/><meta name="generator" content="publican v4.3.2"/><meta name="description" content="As a Red Hat Developer Hub (RHDH) administrator, you can track user activities, system events, and data changes with Developer Hub audit logs."/><link rel="next" href="#assembly-audit-log" title="1. Audit logs in Red Hat Developer Hub"/><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><script type="text/javascript" src="Common_Content/scripts/jquery-1.7.1.min.js"> </script><script type="text/javascript" src="Common_Content/scripts/utils.js"> </script><script type="text/javascript" src="Common_Content/scripts/highlight.js/highlight.pack.js"> </script></head><body><div id="chrometwo"><div id="main"><section xml:lang="en-US" class="article" id="idm46326254547744"><div class="titlepage"><div><div class="producttitle"><span class="productname">Red Hat Developer Hub</span> <span class="productnumber">1.8</span></div><div><h1 class="title">Audit logs in Red Hat Developer Hub</h1></div><div><h3 class="subtitle"><em>Tracking user activities, system events, and data changes with Red Hat Developer Hub audit logs</em></h3></div><div><div xml:lang="en-US" class="authorgroup"><span class="orgname">Red Hat Customer Content Services</span></div></div><div><a href="#idm46326254821904">Legal Notice</a></div><div><div class="abstract"><p class="title"><strong>Abstract</strong></p><div class="para"> |
| 3 | +<html xmlns="http://www.w3.org/1999/xhtml" class="chrometwo"><head><title>Audit logs in Red Hat Developer Hub</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css"/><meta name="generator" content="publican v4.3.2"/><meta name="description" content="As a Red Hat Developer Hub (RHDH) administrator, you can track user activities, system events, and data changes with Developer Hub audit logs."/><link rel="next" href="#assembly-audit-log" title="1. Audit logs in Red Hat Developer Hub"/><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><script type="text/javascript" src="Common_Content/scripts/jquery-1.7.1.min.js"> </script><script type="text/javascript" src="Common_Content/scripts/utils.js"> </script><script type="text/javascript" src="Common_Content/scripts/highlight.js/highlight.pack.js"> </script></head><body><div id="chrometwo"><div id="main"><section xml:lang="en-US" class="article" id="idm46680292852208"><div class="titlepage"><div><div class="producttitle"><span class="productname">Red Hat Developer Hub</span> <span class="productnumber">1.8</span></div><div><h1 class="title">Audit logs in Red Hat Developer Hub</h1></div><div><h3 class="subtitle"><em>Tracking user activities, system events, and data changes with Red Hat Developer Hub audit logs</em></h3></div><div><div xml:lang="en-US" class="authorgroup"><span class="orgname">Red Hat Customer Content Services</span></div></div><div><a href="#idm46680293022688">Legal Notice</a></div><div><div class="abstract"><p class="title"><strong>Abstract</strong></p><div class="para"> |
4 | 4 | As a Red Hat Developer Hub (RHDH) administrator, you can track user activities, system events, and data changes with Developer Hub audit logs. |
5 | 5 | </div></div></div></div><hr/></div><div class="toc"><ul class="toc"><li><span class="section"><a href="#assembly-audit-log">1. Audit logs in Red Hat Developer Hub</a></span><ul><li><span class="section"><a href="#con-audit-log-config_assembly-audit-log">1.1. Configuring audit logs for Developer Hub on OpenShift Container Platform</a></span></li><li><span class="section"><a href="#proc-forward-audit-log-splunk_assembly-audit-log">1.2. Forwarding Red Hat Developer Hub audit logs to Splunk</a></span></li><li><span class="section"><a href="#proc-audit-log-view_assembly-audit-log">1.3. Viewing audit logs in Developer Hub</a></span></li></ul></li></ul></div><section class="section" id="assembly-audit-log"><div class="titlepage"><div><div><h2 class="title">1. Audit logs in Red Hat Developer Hub</h2></div></div></div><p> |
6 | 6 | Audit logs are a chronological set of records documenting the user activities, system events, and data changes that affect your Red Hat Developer Hub users, administrators, or components. Administrators can view Developer Hub audit logs in the OpenShift Container Platform web console to monitor scaffolder events, changes to the RBAC system, and changes to the Catalog database. Audit logs include the following information: |
|
54 | 54 | Install the OpenShift Logging Operator in the <code class="literal">openshift-logging</code> namespace and switch to the namespace: |
55 | 55 | </p><div class="formalpara"><p class="title"><strong>Example command to switch to a namespace</strong></p><p> |
56 | 56 |
|
57 | | -<pre class="programlisting language-bash">oc project openshift-logging</pre> |
| 57 | +<pre class="programlisting language-bash">$ oc project openshift-logging</pre> |
58 | 58 | </p></div></li><li class="listitem"><p class="simpara"> |
59 | 59 | Create a <code class="literal">serviceAccount</code> named <code class="literal">log-collector</code> and bind the <code class="literal">collect-application-logs</code> role to the <code class="literal">serviceAccount</code> : |
60 | 60 | </p><div class="formalpara"><p class="title"><strong>Example command to create a <code class="literal">serviceAccount</code></strong></p><p> |
61 | 61 |
|
62 | | -<pre class="programlisting language-bash">oc create sa log-collector</pre> |
| 62 | +<pre class="programlisting language-bash">$ oc create sa log-collector</pre> |
63 | 63 | </p></div><div class="formalpara"><p class="title"><strong>Example command to bind a role to a <code class="literal">serviceAccount</code></strong></p><p> |
64 | 64 |
|
65 | | -<pre class="programlisting language-bash">oc create clusterrolebinding log-collector --clusterrole=collect-application-logs --serviceaccount=openshift-logging:log-collector</pre> |
| 65 | +<pre class="programlisting language-bash">$ oc create clusterrolebinding log-collector --clusterrole=collect-application-logs --serviceaccount=openshift-logging:log-collector</pre> |
66 | 66 | </p></div></li><li class="listitem"> |
67 | 67 | Generate a <code class="literal">hecToken</code> in your Splunk instance. |
68 | 68 | </li><li class="listitem"><p class="simpara"> |
69 | 69 | Create a key/value secret in the <code class="literal">openshift-logging</code> namespace and verify the secret: |
70 | 70 | </p><div class="formalpara"><p class="title"><strong>Example command to create a key/value secret with <code class="literal">hecToken</code></strong></p><p> |
71 | 71 |
|
72 | | -<pre class="programlisting language-bash">oc -n openshift-logging create secret generic splunk-secret --from-literal=hecToken=<HEC_Token></pre> |
| 72 | +<pre class="programlisting language-bash">$ oc -n openshift-logging create secret generic splunk-secret --from-literal=hecToken=<HEC_Token></pre> |
73 | 73 | </p></div><div class="formalpara"><p class="title"><strong>Example command to verify a secret</strong></p><p> |
74 | 74 |
|
75 | | -<pre class="programlisting language-bash">oc -n openshift-logging get secret/splunk-secret -o yaml</pre> |
| 75 | +<pre class="programlisting language-bash">$ oc -n openshift-logging get secret/splunk-secret -o yaml</pre> |
76 | 76 | </p></div></li><li class="listitem"><p class="simpara"> |
77 | 77 | Create a basic `ClusterLogForwarder`resource YAML file as follows: |
78 | 78 | </p><div class="formalpara"><p class="title"><strong>Example `ClusterLogForwarder`resource YAML file</strong></p><p> |
|
154 | 154 | Run the following command to apply the <code class="literal">ClusterLogForwarder</code> configuration: |
155 | 155 | </p><div class="formalpara"><p class="title"><strong>Example command to apply <code class="literal">ClusterLogForwarder</code> configuration</strong></p><p> |
156 | 156 |
|
157 | | -<pre class="programlisting language-bash">oc apply -f <ClusterLogForwarder-configuration.yaml></pre> |
| 157 | +<pre class="programlisting language-bash">$ oc apply -f <ClusterLogForwarder-configuration.yaml></pre> |
158 | 158 | </p></div></li><li class="listitem"><p class="simpara"> |
159 | 159 | Optional: To reduce the risk of log loss, configure your <code class="literal">ClusterLogForwarder</code> pods using the following options: |
160 | 160 | </p><div class="orderedlist"><ol class="orderedlist" type="a"><li class="listitem"><p class="simpara"> |
|
202 | 202 | From the <span class="strong strong"><strong>Logs</strong></span> view, enter <code class="literal">isAuditEvent</code> into the <span class="strong strong"><strong>Search</strong></span> field to filter audit logs from other log types. You can use the arrows to browse the logs containing the <code class="literal">isAuditEvent</code> field. |
203 | 203 | </li></ol></div><div class="itemizedlist _additional-resources"><p class="title"><strong>Additional resources</strong></p><ul class="itemizedlist _additional-resources" type="disc"><li class="listitem"> |
204 | 204 | <a class="link" href="https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/observability/logging/cluster-logging.html">About Logging in Red Hat OpenShift Container Platform</a> |
205 | | - </li></ul></div></section></section><div><div xml:lang="en-US" class="legalnotice" id="idm46326254821904"><h1 class="legalnotice">Legal Notice</h1><div class="para"> |
206 | | - Copyright <span class="trademark"/>© 2025 Red Hat, Inc. |
| 205 | + </li></ul></div></section></section><div><div xml:lang="en-US" class="legalnotice" id="idm46680293022688"><h1 class="legalnotice">Legal Notice</h1><div class="para"> |
| 206 | + Copyright <span class="trademark"/>© 2026 Red Hat, Inc. |
207 | 207 | </div><div class="para"> |
208 | 208 | The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at <a class="uri" href="http://creativecommons.org/licenses/by-sa/3.0/">http://creativecommons.org/licenses/by-sa/3.0/</a>. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. |
209 | 209 | </div><div class="para"> |
|
0 commit comments