Bug 2064820

Summary: [GSS][RFE] Reduce ceph Audit log verbosity
Product: [Red Hat Storage] Red Hat Ceph Storage Reporter: Karun Josy <kjosy>
Component: RADOSAssignee: Neha Ojha <nojha>
Status: CLOSED DEFERRED QA Contact: Pawan <pdhiran>
Severity: high Docs Contact:
Priority: unspecified    
Version: 4.2CC: akupczyk, amathuri, bhubbard, ceph-eng-bugs, choffman, gjose, ksirivad, lflores, nojha, pdhange, rfriedma, rzarzyns, sseshasa, vumrao
Target Milestone: ---Keywords: FutureFeature
Target Release: 7.0   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-07-06 17:54:55 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1725227    

Description Karun Josy 2022-03-16 16:12:25 UTC
* Description of problem:

How can we control the verbosity of ceph audit logs? If we run a lot of ceph commands(eg: ceph df) frequently to gather metrics, this creates a lot of noise. Is there a tunable by which we can limit or restrict the audit logs to a certain level?

For example :  to only log commands that write changes into the audit log so that all passive read commands are not logged

* Version-Release number of selected component (if applicable):
RHCS 4.2

Comment 2 Yaniv Kaul 2022-03-17 12:29:27 UTC
(In reply to Karun Josy from comment #0)
> * Description of problem:
> 
> How can we control the verbosity of ceph audit logs? If we run a lot of ceph
> commands(eg: ceph df) frequently to gather metrics, this creates a lot of
> noise. Is there a tunable by which we can limit or restrict the audit logs
> to a certain level?

I don't think they should run 'ceph df' to get metrics, but request metrics we do not already provide (via Prometheus and friends).
Running CLI commands is not the way to get metrics.