Stream Astra DB audit logs

In the Astra Portal, go to Streaming.

Select an existing tenant or create a streaming tenant in AWS us-east-2, and then create a namespace and topic in the tenant.

On the Namespace and Topics page, click the new topic, and then copy the topic’s Full Name, such as persistent://aws-us-east-2-mk/NAMESPACE_NAME/TOPIC_NAME.

If necessary, create additional audit log topics, and then record the Full Name for each topic. You can use topics to organize audit logs by event type or other criteria.

In the Astra Portal, go to Streaming, and then click your audit log streaming tenant.

On the Connect tab, click Download client.conf.

To finalize the configuration, do one of the following:

In the Astra Portal, create an application token with the Organization Administrator role.

Create the audit log streaming configuration using the values from the tenant’s client.conf file and your Pulsar configuration:

curl -sS --location -X POST "https://api.astra.datastax.com/v2/organizations/ORG_ID/telemetry/auditLogs" \
--header "Authorization: Bearer APPLICATION_TOKEN" \
--header "Accept: application/json"
--data '{
  "pulsar": {
    "endpoint": "pulsar+BROKER_SERVICE_URL",
    "auth_strategy": "token",
    "topic": "TOPIC_FULL_NAME",
    "auth_name": "token",
    "token": "PULSAR_AUTHENTICATION_TOKEN"
  }
}'

Retrieve and verify the audit log streaming configuration:

curl -sS --location -X GET "https://api.astra.datastax.com/v2/organizations/ORG_ID/telemetry/auditLogs" \
--header "Authorization: Bearer APPLICATION_TOKEN" \
--header "Accept: application/json"

{
  "pulsar": {
    "endpoint": "pulsar+ssl://pulsar-aws-useast2.streaming.datastax.com:6651",
    "topic": "persistent://aws-us-east-2-mk-2/default/audit-log",
    "auth_strategy": "token",
    "token": "********",
    "auth_name": "token"
  }
}