Do not audit log replication writes by default [BTS-826] (arangodb#15924)

neunhoef · web-flow · commit 3b4892b930c7 · 2022-03-17T11:18:51.000+01:00
* Set default log level for audit_document and audit_authentication to INFO.
* CHANGELOG.
* Improve CHANGELOG.
diff --git a/CHANGELOG b/CHANGELOG
@@ -10,6 +10,11 @@ devel
 * Added new AQL function `KEEP_RECURSIVE` to recursively keep attritutes from
   objects/documents, as a conterpart to `UNSET_RECURSIVE`.
 
+* No longer put document writes from replication into the audit log by
+  default. Same with low priority authentication like internal UI requests
+  to .html files for the UI. This solves a performance problem for
+  shards getting in sync with audit log switched on.
+
 * Added an HTTP fuzzer that will fuzz requests (the header for the actual
   moment) and send to the server. The amount of requests sent is provided 
   by one of the parameters of the function `fuzzRequests()` in arangosh.
diff --git a/lib/Logger/LogTopic.cpp b/lib/Logger/LogTopic.cpp
@@ -165,13 +165,13 @@ LogTopic Logger::VIEWS("views", LogLevel::FATAL);
 LogTopic LdapAuthProvider::LDAP_TOPIC("ldap", LogLevel::INFO);
 
 LogTopic AuditFeature::AUDIT_AUTHENTICATION("audit-authentication",
-                                            LogLevel::DEBUG);
+                                            LogLevel::INFO);
 LogTopic AuditFeature::AUDIT_AUTHORIZATION("audit-authorization",
                                            LogLevel::INFO);
 LogTopic AuditFeature::AUDIT_DATABASE("audit-database", LogLevel::INFO);
 LogTopic AuditFeature::AUDIT_COLLECTION("audit-collection", LogLevel::INFO);
 LogTopic AuditFeature::AUDIT_VIEW("audit-view", LogLevel::INFO);
-LogTopic AuditFeature::AUDIT_DOCUMENT("audit-document", LogLevel::DEBUG);
+LogTopic AuditFeature::AUDIT_DOCUMENT("audit-document", LogLevel::INFO);
 LogTopic AuditFeature::AUDIT_SERVICE("audit-service", LogLevel::INFO);
 LogTopic AuditFeature::AUDIT_HOTBACKUP("audit-hotbackup", LogLevel::INFO);
 #endif
