${highlight(r._msg)}
`
+ + `${msgHTML(r)}
`
+ '${esc(r.audit_raw)}
` : '');
+}
+
// Stable hue (0-359) for a name: the compose project color, shared by the
// Sources labels and the Docker app names in the log list.
function hueOf(name) {
@@ -952,7 +998,7 @@ function rehighlight() {
for (const row of list.children) {
const r = recOf.get(row);
if (!r) continue;
- row.querySelector('.msg').innerHTML = highlight(r._msg);
+ row.querySelector('.msg').innerHTML = msgHTML(r);
row.querySelector('.codes').innerHTML = codesHTML(r._msg);
}
}
@@ -979,8 +1025,8 @@ function updateCount(tookMs) {
}
function detailsHTML(r) {
- const order = ['received', 'msg_time', '_time', 'host', 'host_name', 'host_ip', 'source_type', 'container', 'image', 'compose_project', 'compose_service', 'stream', 'unit', 'log_file', 'subsystem', 'device', 'app', 'procid', 'severity', 'facility', 'source', 'proto', 'sd', '_msg'];
- const hidden = new Set(['_stream_id', '_stream', 'sevnum']);
+ const order = ['received', 'msg_time', '_time', 'host', 'host_name', 'host_ip', 'source_type', 'audit_type', 'audit_serial', 'auid', 'user', 'exe', 'res', 'key', 'container', 'image', 'compose_project', 'compose_service', 'stream', 'unit', 'log_file', 'subsystem', 'device', 'app', 'procid', 'severity', 'facility', 'source', 'proto', 'sd', '_msg'];
+ const hidden = new Set(['_stream_id', '_stream', 'sevnum', 'audit_raw']); // audit_raw: shown under the message
if (r.msg_time) hidden.add('_time'); // same as the reception time
const keys = order.filter((k) => r[k] != null && r[k] !== '' && !hidden.has(k))
.concat(Object.keys(r).filter((k) => !order.includes(k) && !hidden.has(k)).sort());
@@ -2060,6 +2106,82 @@ async function configureDmesg(enabled) {
$('#dmesgEnabled').addEventListener('change', (ev) => configureDmesg(ev.target.checked));
+/* ================= Linux audit (auditd) ================= */
+
+let auditState = null;
+
+async function loadAudit() {
+ try { auditState = await api('/api/audit'); } catch { auditState = null; }
+ renderAudit();
+}
+
+function renderAudit() {
+ const s = auditState;
+ const status = $('#auditStatus');
+ if (!s) { status.textContent = ''; return; }
+ $('#auditEnabled').checked = s.enabled;
+ const input = $('#auditPath');
+ input.placeholder = s.defaultPath || '';
+ if (document.activeElement !== input) input.value = s.path || '';
+ let text = t('hostWaiting');
+ let cls = 'muted';
+ if (!s.enabled) {
+ text = t('auditOff');
+ } else if (s.code) {
+ text = t('audit_' + s.code) + (s.error || '');
+ cls = 'bad';
+ } else if (s.open) {
+ text = t('auditOk', { p: s.path || s.defaultPath, r: fmtNum(s.read) });
+ cls = 'good';
+ }
+ status.textContent = text;
+ status.className = 'docker-status ' + cls;
+}
+
+async function configureAudit(change) {
+ const body = { enabled: auditState?.enabled || false, path: auditState?.path || '', ...change };
+ auditState = { ...(auditState || {}), ...body };
+ renderAudit();
+ try { auditState = await api('/api/audit', { method: 'PUT', body }); } catch (e) { toast(e.message); }
+ renderAudit();
+ setTimeout(loadAudit, 1500); // the file is read in the background
+}
+
+$('#auditEnabled').addEventListener('change', (ev) => configureAudit({ enabled: ev.target.checked }));
+$('#auditPath').addEventListener('change', (ev) => configureAudit({ path: ev.target.value.trim() }));
+
+/* ================= LogStream internal logs ================= */
+
+let selfState = null;
+
+async function loadSelfLog() {
+ try { selfState = await api('/api/selflog'); } catch { selfState = null; }
+ renderSelfLog();
+}
+
+function renderSelfLog() {
+ const s = selfState;
+ const status = $('#selfStatus');
+ if (!s) { status.textContent = ''; return; }
+ $('#selfEnabled').checked = s.enabled;
+ $('#selfLevel').value = s.min_level || 'warning';
+ $('#selfLevel').disabled = !s.enabled;
+ const left = (s.dropped || 0) + (s.throttled || 0);
+ status.textContent = s.enabled ? t('selfOk', { n: fmtNum(s.emitted || 0) }) + (left ? t('selfDropped', fmtNum(left)) : '') : t('selfOff');
+ status.className = 'docker-status ' + (s.enabled ? 'good' : 'muted');
+}
+
+async function configureSelfLog(change) {
+ const body = { enabled: selfState?.enabled ?? true, min_level: selfState?.min_level || 'warning', ...change };
+ selfState = { ...(selfState || {}), ...body };
+ renderSelfLog();
+ try { selfState = await api('/api/selflog', { method: 'PUT', body }); } catch (e) { toast(e.message); }
+ renderSelfLog();
+}
+
+$('#selfEnabled').addEventListener('change', (ev) => configureSelfLog({ enabled: ev.target.checked }));
+$('#selfLevel').addEventListener('change', (ev) => configureSelfLog({ min_level: ev.target.value }));
+
/* ================= Docker source ================= */
let dockerState = null;
@@ -2177,6 +2299,8 @@ setInterval(() => {
loadDocker();
loadHost();
loadDmesg();
+ loadAudit();
+ loadSelfLog();
}
}, 4000);
@@ -2471,6 +2595,8 @@ $('#settingsBtn').addEventListener('click', () => {
loadSyslog();
loadHost();
loadDmesg();
+ loadAudit();
+ loadSelfLog();
loadDocker();
renderDbStats();
loadDbStats();
diff --git a/web/index.html b/web/index.html
index 7960fe0..fe51649 100644
--- a/web/index.html
+++ b/web/index.html
@@ -103,6 +103,8 @@
+
+
@@ -276,6 +278,39 @@
+ Linux audit (auditd)
+ + +
+
+
+
+
+ LogStream internal logs
+ + +
+
+
+
+
+