6.4. Troubleshooting audit log configuration

Procedure

• Check the current values that are configured by running the following command:

  $ sudo microshift show-config --mode effective

  Example output

  auditLog:
      maxFileSize: 200
      maxFiles: 1
      maxFileAge: 7
      profile: AllRequestBodies

• Check the audit.log file permissions by running the following command:

  $ sudo ls -ltrh /var/log/kube-apiserver/audit.log

  Example output

  -rw-------. 1 root root 46M Mar 12 09:52 /var/log/kube-apiserver/audit.log

• List the contents of the current log directory by running the following command:

  $ sudo ls -ltrh /var/log/kube-apiserver/

  Example output

  total 6.0M
  -rw-------. 1 root root 2.0M Mar 12 10:56 audit-2024-03-12T14-56-16.267.log
  -rw-------. 1 root root 2.0M Mar 12 10:56 audit-2024-03-12T14-56-49.444.log
  -rw-------. 1 root root 962K Mar 12 10:57 audit.log