MIME-Version: 1.0
References: <CAD5k+7zxAmkoOeVq61gqg1xWu8egSjcRtAT=rrAF=ihxUjdTMQ@mail.gmail.com>
 <CAHsK0FqMEoZ_EL6bdHL=MO6irp3uXa5iC_T9jKuCgwRcOQ=Feg@mail.gmail.com>
 <54b3d612-363e-4c05-8a08-a7563c7d52f1@cloud.gatewaynet.com>
 <CANzqJaBCYU84zhZKRzk6Ec-e1L+ZhJW=kg8P0PKNNKh8aK4ZkQ@mail.gmail.com>
 <d30c5ad3-5d31-4261-b62a-8454cf0d050e@cloud.gatewaynet.com>
 <CANzqJaAm_HSUxRVM7DvMDOVPY4Up3yKTcMa0pQ6SAJ7BFk2qGQ@mail.gmail.com> <aAAIPiQ7kwW3sU1M@ubby>
In-Reply-To: <aAAIPiQ7kwW3sU1M@ubby>
From: Ron Johnson <ronljohnsonjr@gmail.com>
Date: Wed, 16 Apr 2025 15:53:53 -0400
Message-ID: <CANzqJaCTCJHZtiL6Y48Bp7si+MasnrV95+y0jgGxtm4yMH83gA@mail.gmail.com>
Subject: Re: Best Tool for PostgreSQL Auditing and Storing Audit Logs Separately
To: "pgsql-generallists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000c4b6f60632eaa51c"
Archived-At: <https://www.postgresql.org/message-id/CANzqJaCTCJHZtiL6Y48Bp7si%2BMasnrV95%2By0jgGxtm4yMH83gA%40mail.gmail.com>
Precedence: bulk

--000000000000c4b6f60632eaa51c
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Wed, Apr 16, 2025 at 3:42=E2=80=AFPM Nico Williams <nico@cryptonector.co=
m> wrote:

> On Wed, Apr 16, 2025 at 02:43:59PM -0400, Ron Johnson wrote:
> > You'll have to bring that up with the PgAudit maintainer.  Note, though=
,
> > that the purpose of PgAudit is not "recreate the database from audit
> logs";
> > it's "what Auditors care about".  In my experience, auditors do not car=
e
> > about COMMIT and ROLLBACK statements.
>
> I would care about what happened.  To know what happened I'd have to see
> either only audit logs for committed transactions, or also see the
> COMMIT and ROLLBACK statements.
>

Decode the logical replication stream?

--=20
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> lobster!

--000000000000c4b6f60632eaa51c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Wed, Apr 16, 2025 at 3:42=E2=80=AFPM N=
ico Williams &lt;<a href=3D"mailto:nico@cryptonector.com">nico@cryptonector=
.com</a>&gt; wrote:</div><div class=3D"gmail_quote gmail_quote_container"><=
blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-l=
eft:1px solid rgb(204,204,204);padding-left:1ex">On Wed, Apr 16, 2025 at 02=
:43:59PM -0400, Ron Johnson wrote:<br>
&gt; You&#39;ll have to bring that up with the PgAudit maintainer.=C2=A0 No=
te, though,<br>
&gt; that the purpose of PgAudit is not &quot;recreate the database from au=
dit logs&quot;;<br>
&gt; it&#39;s &quot;what Auditors care about&quot;.=C2=A0 In my experience,=
 auditors do not care<br>
&gt; about COMMIT and ROLLBACK statements.<br>
<br>
I would care about what happened.=C2=A0 To know what happened I&#39;d have =
to see<br>
either only audit logs for committed transactions, or also see the<br>
COMMIT and ROLLBACK statements.<br></blockquote><div><br></div><div>Decode =
the logical replication stream?</div><div><br></div></div><span class=3D"gm=
ail_signature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_signatu=
re"><div dir=3D"ltr">Death to &lt;Redacted&gt;, and butter sauce.<div>Don&#=
39;t boil me, I&#39;m still alive.<br><div><div>&lt;Redacted&gt; lobster!</=
div></div></div></div></div></div>

--000000000000c4b6f60632eaa51c--