Audit Event Queue

The following section documents environment variables and configuration settings for customizing MinIO AIStor’s global audit event queue. These settings control all configured audit targets.

Specify the directory path to enable MinIO AIStor’s persistent event store for undelivered messages, such as /opt/minio/audit/events.

MinIO AIStor uses this directory for all configured webhook and audit targets.

Specify the maximum size limit in megabytes (MB) of undelivered events to store in the specified queue dir. Defaults to 10000.

Specify a comma-separated list of HTTP headers to remove from audit log entries. When set, MinIO AIStor removes the specified headers from both the request and response header fields in each audit log entry before sending it to configured audit targets.

Use this setting to filter sensitive or unnecessary headers from audit logs. For example, the following removes authorization and security token headers:

header_filters=Authorization,x-amz-security-token

Defaults to empty (no headers filtered).

The audit_event_queue subsystem also accepts an exclude_apis key, set with the MINIO_AUDIT_EVENT_QUEUE_EXCLUDE_APIS environment variable or the audit_event_queue exclude_apis configuration setting. It drops the named API calls before they are recorded.

For the accepted values and how names are matched, see Log and Event Stream Filters.

Specify the maximum time allowed for flushing events to disk on shutdown. Defaults to 30s.