Common sink parameters

출처: HashiCorp Boundary docs

These Boundary event sink parameters are shared across every sink type — file and stderr — and control what an event sink records and how:

audit_config parameters

audit_filter_overrides - Specifies overrides for the filter operations that are applied to audit events.

audit_filter_overrides parameters

audit_config examples

This example is equivalent to the default settings if no audit_config stanza is provided.

audit_config {
  audit_filter_overrides {
    sensitive = "redact"
    secret    = "redact"
  }
}

This example will HMAC sensitive fields, and encrypt secrets.

audit_config {
  audit_filter_overrides {
    sensitive = "hmac-sha256"
    secret    = "encrypt"
  }
}

This example will not apply a filter to sensitive fields. Note Boundary considers email addresses and usernames to be sensitive. To include these fields in event sink output, set sensitive to an empty string in the audit_filter_overrides block in the following example. The empty string overrides the default filter for sensitive fields.

audit_config {
  audit_filter_overrides {
    sensitive = ""
  }
}

Edit this page on GitHub