DCA · Question #157
When an application being managed by UCP fails, you would like a summary of all requests made to the UCP API in the hours leading up to the failure. What must be configured correctly beforehand for th
The correct answer is A. UCP audit logs must be set to the metadata' or request' level.. To capture a summary of all requests made to the UCP API, the UCP audit logs must be configured to at least the metadata or request level beforehand.
Question
When an application being managed by UCP fails, you would like a summary of all requests made to the UCP API in the hours leading up to the failure. What must be configured correctly beforehand for this to be possible?
Options
- AUCP audit logs must be set to the metadata' or request' level.
- BUCP logging levels must be set to the info' or debug' level.
- CAll engines in the cluster must have their log driver set to the metadata' or request' level.
- DSet the logging level in theconfig object for the ucp-kube-api-server container to warning or higher.
How the community answered
(37 responses)- A95% (35)
- B3% (1)
- D3% (1)
Why each option
To capture a summary of all requests made to the UCP API, the UCP audit logs must be configured to at least the `metadata` or `request` level beforehand.
UCP's audit logs specifically record API requests made to the UCP controller. Setting the audit log level to `metadata` captures information about the API request, including who made it and what resource was affected, while the `request` level includes the full request body, both crucial for reconstructing API call sequences.
UCP logging levels (info/debug) provide operational logs for UCP components, but not a structured summary of *API requests* for audit purposes.
Docker engine log drivers manage container logs, not UCP API audit logs, and 'metadata' or 'request' are audit log levels, not log driver types.
Setting the logging level for a Kubernetes API server container to `warning` or higher would *reduce* the verbosity, missing detailed request information, and refers to the Kubernetes API, not the UCP API audit logs.
Concept tested: Docker UCP audit logging configuration
Source: https://docs.docker.com/ee/ucp/admin/monitor/configure-audit-logs/
Topics
Community Discussion
No community discussion yet for this question.