From: Peter Eisentraut <peter_e@gmx.net>
To: Stephen Frost <sfrost@snowman.net>
Cc: Fujii Masao <masao.fujii@gmail.com>
Cc: Sawada Masahiko <sawada.mshk@gmail.com>
Cc: David Steele <david@pgmasters.net>
Cc: Simon Riggs <simon@2ndquadrant.com>
Cc: Tatsuo Ishii <ishii@postgresql.org>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Cc: Abhijit Menon-Sen <ams@2ndquadrant.com>
Subject: Re: Auditing extension for PostgreSQL (Take 2)
Date: Mon, 04 May 2015 20:05:46 -0400
Message-ID: <5548095A.1040900@gmx.net> (raw)
In-Reply-To: <20150504190035.GO30322@tamriel.snowman.net>
References: <552EA121.1090603@pgmasters.net>
<CAD21AoBoS6Q5yjB05LpfKTzhKmarqwwVq06fuPDFsm0T8gSk_Q@mail.gmail.com>
<5534FC6E.9030906@pgmasters.net>
<CAD21AoCxFOLWk-k179PyFxzwjkOW8oPaNk73GxZi+Yw2+n4YFA@mail.gmail.com>
<553938A1.7030707@pgmasters.net>
<CAD21AoDBt44ABM_0WMketM8bZtqLBMrJpd9RD5tE=Dkr57ft_A@mail.gmail.com>
<553FA477.5010803@pgmasters.net>
<CAD21AoCQSGZ5x+sfs4g1x_8Fip60x8ULQFTAGB5XTrKQZvPWPA@mail.gmail.com>
<CAHGQGwGJnRW69rSL1=tza571_eA44hBeChg-NAVrqQytESgvLg@mail.gmail.com>
<55443ED1.6070003@gmx.net>
<20150504190035.GO30322@tamriel.snowman.net>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
On 5/4/15 3:00 PM, Stephen Frost wrote:
> One particular advantage of having the extension is that having it
> doesn't impact existing users of the in-core logging system. I don't
> recall any specific proposals for improving the in-core logging system
> to add the capabilities for session logging that the extension
> provides, but it seems likely to require changes to at least the CSV
> format, new log_line_prefix escape codes (which we're using quite a
> few of already...), new GUCs, and potentially behavior changes to make
> it work. As I say above, I'm happy to have those discussions (and
> I've been party to them quite a few times in the past...),
Well yeah, from my perspective, the reason not much has happened in the
area of logging is that you and Magnus have repeatedly said you were
planning some things.
The reasons given above against changing logging just as easily apply to
auditing. This implementation is only a starting point. We don't know
whether it will fulfill anyone's requirements. The requirements for
logging are "it feels good enough for an admin". The requirements for
auditing are "it satisfies this checklist". We need to be prepared to
aggressively evolve this as we gather more information about
requirements. Otherwise this will become something like contrib/isn,
where we know it doesn't satisfy real-world uses anymore, but we're
afraid to touch it because someone might be using it and we don't have
the domain knowledge to tell them to stop.
--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: peter_e@gmx.net, sfrost@snowman.net, masao.fujii@gmail.com, sawada.mshk@gmail.com, david@pgmasters.net, simon@2ndquadrant.com, ishii@postgresql.org, ams@2ndquadrant.com
Subject: Re: Auditing extension for PostgreSQL (Take 2)
In-Reply-To: <5548095A.1040900@gmx.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox