Audit Event Queue

The following section documents environment variables and configuration settings for customizing MinIO AIStor’s global audit event queue. These settings control all configured audit targets.

Settings

Audit event queue dir

Specify the directory path to enable MinIO AIStor’s persistent event store for undelivered messages, such as /opt/minio/audit/events.

MinIO AIStor uses this directory for all configured webhook and audit targets.

Audit event queue dir max size

Specify the maximum size limit in megabytes (MB) of undelivered events to store in the specified queue dir. Defaults to 10000.

Audit event queue header filters

Specify a comma-separated list of HTTP headers to remove from audit log entries. When set, MinIO AIStor removes the specified headers from both the request and response header fields in each audit log entry before sending it to configured audit targets.

Use this setting to filter sensitive or unnecessary headers from audit logs. For example, the following removes authorization and security token headers:

header_filters=Authorization,x-amz-security-token

Defaults to empty (no headers filtered).

Audit event queue flush timeout

Specify the maximum time allowed for flushing events to disk on shutdown. Defaults to 30s.