Creates and returns a new Audit Log oboject whish will store its logfiles in a given directory>.

AuthAttemptEvent is authentication attempt that either succeeded or failed based on event status.

event ID (used as cursor value for enumeration, not stored).

OS login.

EventNamespace is a namespace of the session event.

event time.

event type/kind.

teleport user.

ExecEvent is an exec command executed by script or user on the server side.

address on the host.

LogfileExt defines the ending of the daily event log file.

MaxChunkBytes defines the maximum size of a session stream chunk that can be requested via AuditLog.GetSessionChunk().

Port forwarding event.

client (user's) address.

ResizeEvent means that some user resized PTY on the client.

SCPEvent means data transfer that occured on the server.

SessionByteOffset is the number of bytes written to session stream since the beginning.

SessionEndEvent indicates taht a session has ended.

SessionEventTimestamp is an offset (in milliseconds) since the beginning of the session when the terminal IO event happened.

Join & Leave events indicate when someone joins/leaves a session.

SessionLogPrefix defines the endof of session log files.

SessionLogsDir is a subdirectory inside the eventlog data dir where all session-specific logs and streams are stored, like in /var/lib/teleport/logs/sessions.

SessionPrintEvent event happens every time a write occurs to temirnal I/O during a session.

SessionPrintEventBytes says how many bytes have been written into the session during "print" event.

SessionEvent indicates that session has been initiated or updated by a joining party on the server.

SessionStreamPrefix defines the ending of session stream files, that's where interactive PTY I/O is saved.

expressed as 'W:H'.

AuditLog is a new combined facility to record Teleport events and sessions.

DiscardAuditLog is do-nothing, discard-everything implementation of IAuditLog interface used for cases when audit is turned off.

MockAuditLog is audit log used for tests.

SessionChunk is a chunk to be posted in the context of the session.

BaseSessionLogger implements the common features of a session logger.

SessionSlice is a slice of submitted chunks.

IAuditLog is the primary (and the only external-facing) interface for AUditLogger.

EventFields instance is attached to every logged event.