Configuring and Using Doris Audit Logs (Compliance Checks)

What is an Audit Log?

An audit log is a record of the system's operation, used to track events that may indicate potential issues or abnormal behavior.

Why Use Audit Logs?

Using audit logs helps us identify and resolve issues, ensuring the security and reliability of the system. It also helps us comply with relevant laws, regulations, and standards.

Audit Log Configuration

1. Logging Configuration

  • Log Level: Select an appropriate log level (debug, info, warning, error, etc.) to ensure that less important information is not recorded.
  • Log Format: Ensure the log format is standardized to facilitate identification and analysis.

2. Log Storage

1. Log File Storage

Choose an appropriate storage method (such as disk or NetEase Cloud), ensuring that logs are stored reliably and preventing loss.

2. Log Integration

Use a log management system (such as Logstash, Graylog, etc.) to integrate and analyze logs, improving the overall efficiency of audit logs.

3. Log Retrieval

1. Log Retrieval Tools

Use log retrieval tools (such as ELK Stack) for log searching, filtering, and analysis.

2. Log Analysis

Use log analysis tools (such as Grafana) to create visualized audit log reports, aiding in analysis and problem resolution.

Audit Log Usage

1. Log Collection

Ensure the system is collecting and storing audit logs.

2. Log Analysis

Use tools to analyze logs and identify potential issues or abnormal behavior.

3. Log Reporting

Create and share audit log reports as needed to help resolve issues and improve the system.

Compliance Checks

Comply with relevant laws, regulations, and standards (such as GDPR, HIPAA, etc.) to ensure the security and reliability of the system.

2. Procedure Checks

Conduct audit log checks according to internal regulations of the company or organization to ensure the system meets requirements.

3. Operational Checks

Identify potential issues or abnormal behavior through real-time monitoring and reporting.