Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u58f5-00CqQq-A3 for pgsql-general@arkaria.postgresql.org; Wed, 16 Apr 2025 19:43:07 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1u58f2-004Azh-7H for pgsql-general@arkaria.postgresql.org; Wed, 16 Apr 2025 19:43:05 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u58f1-004AzZ-LC for pgsql-general@lists.postgresql.org; Wed, 16 Apr 2025 19:43:04 +0000 Received: from dragonfly.ash.relay.mailchannels.net ([23.83.222.51]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1u58ey-000Rim-0X for pgsql-general@lists.postgresql.org; Wed, 16 Apr 2025 19:43:04 +0000 X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id B69612C2078; Wed, 16 Apr 2025 19:42:57 +0000 (UTC) Received: from pdx1-sub0-mail-a286.dreamhost.com (100-101-172-131.trex-nlb.outbound.svc.cluster.local [100.101.172.131]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id 1A0F42C4259; Wed, 16 Apr 2025 19:42:57 +0000 (UTC) ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1744832577; a=rsa-sha256; cv=none; b=91flH5P2X/jDy9RI+ZvzA0cAVQIxmchPZxee+7DnYpdFS0JHEYp94mf4fP1Z4r17TT5mbf qXHdXJ0esX93TWGeMhUpSAmbaUpBJg00sDDJsUlZqyUaz6AFOctoI/wPNW/39/Gu2JYU7N ImiAQXrlGI7vIuZbxZi7oLGE1FqRMtuarG5UR8yLNJ9R40RYlSt5ntWNIONvbKe1NLYz/d 0bus/eugtBe6vyjL8zjX8zSKKOYaCUNZPvAU5xiPq4NRvksyw1RJco2DEfOO71dzcQTJWY Bdtkspi4UcnNLKYr1NF0hgxbRZIO6dpxzUxVOEc2m28bzLYEgAFMmD8yCSg4qQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1744832577; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references:dkim-signature; bh=/AOh4VmzLle7cwi+S/FeVUM1H5Z28Fk0eOqu8YTIqQo=; b=U6TxhPotbcFdF1ThxHl4J1dgkLCY41MG/uguubLSZVWp7icPCJUFGkbq1lccffEuwS5Owd oNI0DoSW+DUpOY54KaqAsIAOLUQarD6Zg2k6HraTpJO86JyrItyGNgkANi+X/KjAzrlMIX EeSW9AH01ILF2gx+G70tMDQnr/4oXZO5Sxq4DMjj3JNqoJjBc/RStGfg2tfetlvYnXjQHh 9Go2f7qC23nq76srgFfrLmkE5BvOvf8yP03yGsSCZ85GHB1ysJcwEP6KWUTNaCx8bKgV2O ed0DiIrr5Vm4I2AXKm6Nu21KOI6Q1w3m17A7ttpxElBOLwilwH0s3+Xmax6ZKQ== ARC-Authentication-Results: i=1; rspamd-66f96cc86b-vtxsj; auth=pass smtp.auth=dreamhost smtp.mailfrom=nico@cryptonector.com X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com X-MC-Relay: Neutral X-MailChannels-SenderId: dreamhost|x-authsender|nico@cryptonector.com X-MailChannels-Auth-Id: dreamhost X-Decisive-Decisive: 74fd49c151f758e4_1744832577362_4262038050 X-MC-Loop-Signature: 1744832577362:1496630335 X-MC-Ingress-Time: 1744832577362 Received: from pdx1-sub0-mail-a286.dreamhost.com (pop.dreamhost.com [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.101.172.131 (trex/7.0.3); Wed, 16 Apr 2025 19:42:57 +0000 Received: from ubby (syn-075-081-095-064.res.spectrum.com [75.81.95.64]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by pdx1-sub0-mail-a286.dreamhost.com (Postfix) with ESMTPSA id 4ZdBJc43DTz5B; Wed, 16 Apr 2025 12:42:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptonector.com; s=dreamhost; t=1744832576; bh=/AOh4VmzLle7cwi+S/FeVUM1H5Z28Fk0eOqu8YTIqQo=; h=Date:From:To:Cc:Subject:Content-Type; b=alA3BF52bS7X7DOeyCYWLokp2rCfw68TwceGy862pB1ydg6/HoR0UaG5otR6I8yTP lO48BLJF/RRq/we5W2eseXcOt2Q6zUGm0WhAh6u3u/y8pQDC6QwgIgWuV5uc5oe/3Q z98IVuW/7ww1q+5h43N5tpqueZBSPOBr25YQI6OyzZ9KO92Oml1Jbir/UgiLXNAu0q yr990jzkhCYL3FbKL5I5RVqQEyVAqVMBHodhL61hQNiJTR1+OBN1gZUflSKUHvEJ49 aAW72kk12Zorpqqwz70uhELl9rFpDmecZ75u2QfYaZFwUmf63oz3VkL12w53GKGZNH Mig8RglfnMAgw== Date: Wed, 16 Apr 2025 14:42:54 -0500 From: Nico Williams To: Ron Johnson Cc: "pgsql-generallists.postgresql.org" Subject: Re: Best Tool for PostgreSQL Auditing and Storing Audit Logs Separately Message-ID: References: <54b3d612-363e-4c05-8a08-a7563c7d52f1@cloud.gatewaynet.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Wed, Apr 16, 2025 at 02:43:59PM -0400, Ron Johnson wrote: > You'll have to bring that up with the PgAudit maintainer. Note, though, > that the purpose of PgAudit is not "recreate the database from audit logs"; > it's "what Auditors care about". In my experience, auditors do not care > about COMMIT and ROLLBACK statements. I would care about what happened. To know what happened I'd have to see either only audit logs for committed transactions, or also see the COMMIT and ROLLBACK statements. Nico --