Skip to content
This repository has been archived by the owner on May 10, 2024. It is now read-only.

Introduce audit log #286

Open
blackandred opened this issue Feb 5, 2023 · 1 comment
Open

Introduce audit log #286

blackandred opened this issue Feb 5, 2023 · 1 comment

Comments

@blackandred
Copy link
Contributor

blackandred commented Feb 5, 2023

For compliance reasons an audit log may be introduced to record all security related failures and backup downloads.

Example events:

  • "backup downloaded from X IP at 01.01.2023 + token shortcut"
  • "failed to upload backup, window does not match, date: 01.01.2023 + IP + token shortcut"
  • "failed to upload backup, no gpg header/footer found + date + IP + token shortcut"
  • "too many backups uploaded in a short time period + date + IP + token shortcut"
  • "warning: backup file is at least 50% lighter than previous backup"
  • "tried to upload files simultaneously + date + IP + token shortcut"

There should be an endpoint to browse the audit log, with a pagination.
Every entry in the audit log should have a severity one of: low, medium, high
The audit log should require a permission from the user to view.

Additionally the collection health endpoint could show an extra entry that counts if there is any entry with high severity with a possibiity to pass the "since" date as a query string parameter, with defaults to 1 day.

@blackandred
Copy link
Contributor Author

I think this feature can possibly highlight Backup Repository in comparison to other backup solutions.
A great compliance + end-to-end encryption + automatic backup testing on Kubernetes could make it a really good solution comparing to just "backup & restore cloud volume".

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant