Separating Audit Logs by Event Type

By default, when Audit Log Packages, such as UserAudit, are enabled and set to Log Level Info, all types of audit events are logged to a single file: anzo_audit_info.log. You have the option, however, to configure Anzo to create and store smaller audit logs by generating separate files in subdirectories that are sorted by event type, such as userEvents, queryEvents, accessEvents, etc. Follow the instructions below to enable this option:

1. In the Administration application, expand the Servers menu and click Advanced Configuration. Click I understand and accept the risk.
2. Search for the Anzo Audit Logging Framework bundle and view its details.
3. Click the Services tab and expand com.cambridgesemantics.anzo.AuditLog.
4. Find the com.cambridgesemantics.anzo.auditlog.rdfLog property (shown below).

   

5. Click the property to make it editable, and then select the checkbox to enable it.

   

6. Click the checkmark icon () to save the change.
7. Restart Anzo to apply the configuration changes.

Once new audit events are triggered, an audit/audit-flds subdirectory is created in the <install_path>/Server/logs directory. And audit logs will be created in the userEvents, queryEvents, accessEvents, etc. subdirectories.