Auditing

[Vincent]

The blog post (https://medium.com/square-corner-blog/protecting-infrastructure-secrets-with-keywhiz-af674410832f#.j45kegjzk) mentions auditing, and maybe I'm missing something, but does the current version of Keywhiz have access auditing? I don't see anything in the data structure that indicates this.

[Matthew McPherrin]

Our auditing is based on logs (syslog from kwfs & the server).  We are currently rethinking our auditing story however, as scraping logs is hard to scale and isn't easily machine-parsable.  There's no released code for ingesting lots, unfortunately.

Sorry that we missed this email -- gmail apparently decided it was spam for me and everyone else on my team.  I only discovered it when looking for a separate email about auditing....

On Thu, Sep 8, 2016 at 6:52 PM, Vincent <vcar...@onemedical.com> wrote:

The blog post (https://medium.com/square-corner-blog/protecting-infrastructure-secrets-with-keywhiz-af674410832f#.j45kegjzk) mentions auditing, and maybe I'm missing something, but does the current version of Keywhiz have access auditing? I don't see anything in the data structure that indicates this.

--
You received this message because you are subscribed to the Google Groups "keywhiz-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keywhiz-users+unsubscribe@googlegroups.com.
To post to this group, send email to keywhi...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/keywhiz-users/8a3081d4-5c25-42a6-a1c2-e0aea6f15a1f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.