configuring-audit-logging

CockroachDB audit logging captures security-relevant events like authentication attempts and privilege changes to meet SOC 2, HIPAA, or PCI DSS requirements. You enable it by modifying cluster settings to activate admin and role-based auditing policies.

Role-based audit logging in CockroachDB captures security-relevant events including authentication attempts, privilege changes, DDL operations, and sensitive data access. Targeted auditing allows you to monitor specific roles handling sensitive data.

Verify audit log delivery by checking log outputs after modifying cluster settings and enabling admin or role-based auditing. This ensures security events are properly captured and integrated with your monitoring workflows for security posture.

Yes, you can rollback audit logging configuration changes on a CockroachDB cluster. The process includes rollback guidance to safely revert cluster settings and disable admin or role-based auditing when needed without disrupting production environments.

Yes, CockroachDB supports role-based access controls for audit trails. You can enable role-based auditing to apply targeted policies that capture sensitive data access and DDL operations for specific roles requiring compliance monitoring.