Kafka Audit Logs
The following section documents environment variables for configuring MinIO AIStor to publish audit logs to a Kafka broker.
The top-level configuration key for defining a Kafka broker target for publishing MinIO AIStor audit logs.
Example
Settings
Enable
Set to “on” to enable the target. Set to “off” to disable the target.
Brokers
A comma-separated list of Kafka broker addresses.
Topic
The name of the Kafka topic to associate to MinIO AIStor audit log events.
TLS
Set to “on” to enable TLS connectivity to the specified Kafka brokers. Defaults to “off”.
TLS skip verify
Set to “on” to direct MinIO AIStor to skip verification of the Kafka broker TLS certificates.
SASL
Set to “on” to direct MinIO AIStor to use SASL to authenticate against the Kafka brokers.
SASL username
The SASL username MinIO AIStor uses for authentication against the Kafka brokers.
SASL password
The SASL password MinIO AIStor uses for authentication against the Kafka brokers.
SASL mechanism
The SASL mechanism MinIO AIStor uses for authentication against the Kafka brokers. Defaults to plain.
TLS client auth
Set to “on” to direct MinIO AIStor to use mTLS to authenticate against the Kafka brokers.
Client TLS cert
The path to the TLS client certificate to use for mTLS authentication.
Client TLS key
The path to the TLS client private key to use for mTLS authentication.
Version
The version of the Kafka broker MinIO AIStor expects at the specified endpoints.
Max retry
The maximum number of times MinIO AIStor retries sending a failed event. Defaults to 5.
Retry interval
The time in seconds MinIO AIStor waits between retrying a failed event. Defaults to 1 second.
Comment
A comment to associate with the configuration.
Queue dir
audit_event_queue instead.
Specify the directory path to enable MinIO AIStor’s persistent event store for undelivered messages, such as /opt/minio/events.
Queue size
audit_event_queue instead.
Specify the maximum limit for undelivered messages. Defaults to 100000.