Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u58vC-00Cul9-4L for pgsql-general@arkaria.postgresql.org; Wed, 16 Apr 2025 19:59:46 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1u58vA-004adQ-9m for pgsql-general@arkaria.postgresql.org; Wed, 16 Apr 2025 19:59:45 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1u58v9-004adI-RU for pgsql-general@lists.postgresql.org; Wed, 16 Apr 2025 19:59:44 +0000 Received: from seashell.cherry.relay.mailchannels.net ([23.83.223.162]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1u58v7-000QMI-32 for pgsql-general@lists.postgresql.org; Wed, 16 Apr 2025 19:59:43 +0000 X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id D24888A4287; Wed, 16 Apr 2025 19:59:40 +0000 (UTC) Received: from pdx1-sub0-mail-a286.dreamhost.com (trex-1.trex.outbound.svc.cluster.local [100.110.58.244]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id 7326A8A4278; Wed, 16 Apr 2025 19:59:40 +0000 (UTC) ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1744833580; a=rsa-sha256; cv=none; b=JI2TT8gewhsHxTt0rKX6VnfyKQNDfOnB1wwBtIAOAfqtTUzllhicGa1Q6c2jC4wkkRGFzZ DsCnu3ogiCZvYfiAzFZHeQIvRGAPREmIvo5h+7pkTTwWbn2wJlpT5arvp9S4ED5zSpNFMp w2ZxYLcaZ6A8DLJjwCAiiov6S6/4tr/hjknA4e9AquvI4Um5tK73Fw5gU9w3yyFMGgll3H +mXpR4ICHNibU9lnny/D9I28s1sXUKhCIZhVrE3UDdO+mn1AwGh7FcC4Gh4WK+8eic9f5B iA2/30DkPA1NNSGJThTILBhvcqpasVKnoMWWmcatWV2OizhY4+XxiRnbOLTllA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1744833580; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=07aEsE3L/BuBeCMS2t6Kqn+b8Sq8UbsVKv4zsik7G6A=; b=R8144oNIRliLORPz472+YMInVBsiXcLKMcITUpcrx75qpnBZUuv+F3mzm5jakavl/DGohe 6xSMXwrudeUmBbPwXJtE/u5LrnPJNLURpcYtzNecxSRmQd38+MnWyIdrCDMEAPoabNuNdA sSHGwNVcBpv65Eh4GLTY4CT9nLc2B7b6w1nrt0+0GWWt3LB9G3p6hDd2eGubn3ZLnByaN4 xlTiZbQWVmQkrvDEAO8OxORuL1RVVOy5BryoIIvKVs96duL8270O7mWfW6MTJbqfCObq3Y Tkdg7Ze7wwc/zWvRX2fpGwfUM7aV2n4g4wC7Xzc+fRh+5bJJ8C3BZlw5/OWUnQ== ARC-Authentication-Results: i=1; rspamd-5dd7f8b4cd-5mk29; auth=pass smtp.auth=dreamhost smtp.mailfrom=nico@cryptonector.com X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com X-MC-Relay: Neutral X-MailChannels-SenderId: dreamhost|x-authsender|nico@cryptonector.com X-MailChannels-Auth-Id: dreamhost X-Vacuous-Fearful: 518aec1d095dc077_1744833580688_2613330016 X-MC-Loop-Signature: 1744833580688:2857092075 X-MC-Ingress-Time: 1744833580688 Received: from pdx1-sub0-mail-a286.dreamhost.com (pop.dreamhost.com [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.110.58.244 (trex/7.0.3); Wed, 16 Apr 2025 19:59:40 +0000 Received: from ubby (syn-075-081-095-064.res.spectrum.com [75.81.95.64]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by pdx1-sub0-mail-a286.dreamhost.com (Postfix) with ESMTPSA id 4ZdBgv6sLcz5B; Wed, 16 Apr 2025 12:59:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptonector.com; s=dreamhost; t=1744833580; bh=07aEsE3L/BuBeCMS2t6Kqn+b8Sq8UbsVKv4zsik7G6A=; h=Date:From:To:Cc:Subject:Content-Type:Content-Transfer-Encoding; b=qQgjkCGU2/amUhk55YYtdbgF5pzkA9P560fgxSMAW6LZqFIZZo5a7h6zDqwahV2O8 UYZY4LfgY+i5fhY+RSfrZg9nadSClSiLmpphldtzMScURPJYoqVwMGve7SrOeXFMJB I8MKt+W2cMApJkZI/Rjp/nzwRYRIC+7LrzxQWpMkYce9EI1kUtr2BKB2eiyVNKXaDx vCiv+5fupfzk8uy6ka5w4zzizxY6Fz1puhuXe/rOjtDDgqLWQgCZ7j2ij02wQ+qOR3 ENKMG/b8ipWXyonxKFkJX9vXTBQKNwgn6Xq4ORRingM/BIC/5Kk9w4nVtPUKpGD3Jo J+GB+knkODCDg== Date: Wed, 16 Apr 2025 14:59:37 -0500 From: Nico Williams To: Ron Johnson Cc: "pgsql-generallists.postgresql.org" Subject: Re: Best Tool for PostgreSQL Auditing and Storing Audit Logs Separately Message-ID: References: <54b3d612-363e-4c05-8a08-a7563c7d52f1@cloud.gatewaynet.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Wed, Apr 16, 2025 at 03:53:53PM -0400, Ron Johnson wrote: > On Wed, Apr 16, 2025 at 3:42 PM Nico Williams wrote: > > I would care about what happened. To know what happened I'd have to see > > either only audit logs for committed transactions, or also see the > > COMMIT and ROLLBACK statements. > > Decode the logical replication stream? Yes, or use Debezium or the like which... do just that.