Ataccama ONE Agentic ONE Desktop ONE DQ&C ONE MDM ONE RDM ONE Runtime Server
latest (17.1.0) 17.0.0 16.3.x 16.2.0 16.1.0 16.0.0 15.4.0 15.3.0 15.2.0 15.1.0 14.5.x 13.9.x 13.8.x 13.7.x 13.6.x 13.5.0 13.4.x 13.3.x 13.2.x
Downloads

Audit Configuration

In on-premise deployments, the following properties configure the Audit module and need to be provided in the audit/etc/application.properties file on the ONE Application Server.

Basic settings

Property Data type Description

server.port

String

The number of the port where the Audit module is running.

Default value: 8071.

Keycloak authentication

Property Data type Description

ataccama.authentication.keycloak.server-url

String

The URL of the server where Keycloak is running.

Default value: http://localhost:8080/auth.

ataccama.authentication.keycloak.realm

String

The name of the Keycloak realm.

Default value: ataccamaone.

ataccama.authentication.keycloak.token.client-id

String

The client identifier. Used to verify a user’s authorization token and to log in a user.

Default value: audit-token-client.

ataccama.authentication.keycloak.token.secret

String

The secret key of the client. Secret keys can be generated using Keycloak.

Default value: audit-token-client-s3cret.

ataccama.authentication.keycloak.token.issuer

String

Specifies the issuer of the JWT token. Typically, Keycloak uses the URL of the realm as the token issuer.

Default value: ${ataccama.authentication.keycloak.server-url}/realms/${ataccama.authentication.keycloak.realm}.

ataccama.authentication.keycloak.admin.enable

Boolean

Enables creating an administration client for Keycloak.

Default value: false.

Audit database

Property Data type Description

spring.datasource.url

String

A JDBC connection string pointing to the Audit database.

Default value: jdbc:postgresql://localhost:5432/audit.

spring.datasource.username

String

The username for the Audit database.

Default value: one.

spring.datasource.password`

String

The password for the Audit database.

Default value: one.

Maximum audit retention

These properties define the maximum retention periods that you can configure for audit logs. They set upper limits only — they are not the retention values that apply at runtime.

The retention values that actually apply are set separately in the web application or through GraphQL, and each one can go up to the corresponding maximum defined here. As a result, changing a maximum only changes the highest value you can select. To configure the retention values that apply at runtime, see Change audit retention settings.

Property Data type Description

ataccama.audit.export.max-db-retention

Integer

Maximum value, in days, that can be configured for how long audit logs are kept in the audit database before deletion.

Default value: 365.

ataccama.audit.export.max-export-threshold

Integer
(Optional) This property is only relevant if the Export feature is enabled and configured. For more information, see Audit, section Export audit logs to ONE Object Storage.

Maximum value, in days, that can be configured for how long audit logs are kept in the audit database before they are exported to the designated ONE Object Storage (MinIO) bucket.

Default value: 270.

ataccama.audit.export.max-export-retention

Integer
(Optional) This property is only relevant if the Export feature is enabled and configured. For more information, see Audit, section Export audit logs to ONE Object Storage.

Maximum value, in days, that can be configured for how long audit logs are kept in the designated ONE Object Storage (MinIO) bucket.

Default value: 365.

Was this page useful?