AnsweredAssumed Answered

Difference between audit.detailThreshold and audit.messageThrehold clusterwide properties

Question asked by im.ChetanPotdar on Mar 21, 2017
Latest reply on Mar 21, 2017 by ellaz01

Hey all,

 

I need some understanding regarding the 2 audit cluster-wide properties : audit.detailThreshold and audit.messageThrehold.

 

Below snippet of definitions taken from help center are not clear to me

 

audit.detailThreshold : Minimum level for an audit detail message to be saved to the database.

audit.messageThreshold : Minimum level for a message at the end of processing before it is saved to the database.

 

I have observed below cases by altering the values of both the properties.

 

Case

audit.detailThreshold

audit.messageThreshold

Comments

1

Info

Info

INFO and WARNING both are logged

2

Info

Warning

INFO and WARNING both are logged

3

Warning

Info

Only WARNING Messages are logged

4

Warning

Warning

Only WARNING Messages are logged

 

Can someone please clarify what is the difference between both the properties and in which scenario we should use them? Any use-case supporting the same? What differences will be observed in log files if we alter the values of these properties?

 

Outcomes