This project will create a new binary, which will need to shipped and documented.

Summary

This project will make all manipulation of audit configuration show up in mongod/s audit logs without requiring a cluster restart.

For details, please see product description

Motivation

Audit configuration is currently present in the mongod/s configuration files. Changing audit configuration requires a restart of cluster nodes and thus takes time to operationalize. The lack of online manipulation of auditing configuration limits how quickly and frequently customers may want to fine-tune audit configuration based on their workloads. It also makes our auditing mechanism feel “legacy” and makes our competition (e.g., Oracle, MySQL) look more appealing for these enterprise-minded customers.

It also enables our customers to achieve separation of duties by delegating rights to administer audit configuration to a subset of users. It also allows changes to audit configuration to be reflected in the audit log.

Documents

Product Description
Scope document
Technical Design