[DATALAB-1753] ???Support audit by Linux Machine level

• Type: New Feature
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: DataLab Main
• Labels: AWS AZURE Debian GCP RedHat
• Epic Link: Audit
• Assignee: Leonid Frolov
• Reporter: Vira Vitanska
• Created: 23/Apr/20 12:20
• Updated: 15/Jul/22 14:06

Description

1. Implement Squid/NAT audit (network activity monitoring). Perhaps it should be stored in Edge node and only admin can view them after edge connection via ssh. (i)Devops should  discuss.
2. Implement daemon auditd in order to receive audit report for troubleshooting. You can read about auditd in https://manpages.ubuntu.com/manpages/xenial/en/man8/auditd.8.html#:~:text=auditd%20is%20the%20userspace%20component,the%20ausearch%20or%20aureport%20utilities.&text=The%20audit%20daemon%20itself%20has,admin%20may%20wish%20to%20customize   Devops should  discuss.