Sign inSign up

openlbac/lbac-audit

By openlbac

•Updated 6 months ago

Audit log sink for OpenLBAC — stores query audit trails to different sinks(Postgres, file, etc)

Image
Security
0

1.1K

openlbac/lbac-audit repository overview

⁠lbac-audit

CI Release Go 1.26 Go Report Card Docker License

Audit log service for OpenLBAC⁠ (enterprise). Receives structured audit events from lbac-server and lbac-core over a connect-go client-streaming RPC (AuditService/Record) and writes them to a configurable sink. Events are queryable via the lbac-server REST API and visible in the UI under Reports → Audit.

Requires an enterprise license with the audit feature.

⁠Quick start

LISTEN_ADDR=:9091 \
SINK_TYPE=postgres \
AUDIT_DB_DSN=postgres://openlbac:openlbac@localhost/openlbac \
go run ./cmd

⁠Configuration

VariableDefaultDescription
LISTEN_ADDR:9091gRPC listen address
SINK_TYPEpostgrespostgres or file
AUDIT_DB_DSN—Postgres DSN (required when SINK_TYPE=postgres)
AUDIT_FILE_DIR/var/log/lbac-auditDirectory for audit log files (required when SINK_TYPE=file)

The file sink is write-only — events are not queryable via the API or UI.

⁠Docker

docker run -p 9091:9091 \
  -e SINK_TYPE=postgres \
  -e AUDIT_DB_DSN=postgres://openlbac:openlbac@postgres/openlbac \
  openlbac/lbac-audit:latest

⁠Build

go build -o bin/lbac-audit ./cmd

⁠Documentation

Full deployment guides at openlbac.com⁠.

⁠License

Elastic License 2.0⁠

Tag summary

Content type

Image

Digest

sha256:e026f41a7…

Size

15 MB

Last updated

6 months ago

docker pull openlbac/lbac-audit