Audit object generation in a dispersed storage network
A method for execution by a dispersed storage and task (DST) processing unit includes obtaining audit records for an audit object and determining when the audit object is complete. When the audit object is complete, aggregating the audit records of the audit object within the audit object by generating the audit object to include the audit records; generating identifier (ID) information and generating integrity information. Fields of the audit object are populated with the audit records, the ID information, and the integrity information and a name of the audit object is determined for storage of the audit object and the name of the audit object in a dispersed storage network (DSN).
1. A method for execution by a storage processing unit that includes a processor, the method comprises:
obtaining audit records for an audit object, each of the audit records corresponding to an audit message, each of the audit records identifying a storage network entity and each of the audit records including a time and date, and a type code selected from a plurality of type codes, wherein the plurality of type codes include a storage access event type code and an authentication audit event type code;
generating the audit object to include the audit records, system ID information, and integrity information; and
facilitating storage of the audit object in a storage network utilizing a corresponding name of the audit object.
2. The method of claim 1 wherein the name of the audit object is determined based on a virtual storage network address associated with accessing the audit object when stored as a plurality of audit object slices in the storage network.
3. The method of claim 1 wherein the name of the audit object includes at least one of: a text string name or a sequence number or a timestamp when created or a timestamp associated with when the audit object may be deleted.
4. The method of claim 1 wherein the name of the audit object includes at least one of: a timestamp when created or a timestamp associated with when the audit object may be deleted.
5. The method of claim 1 wherein the integrity information is generated based on at least one of: utilizing an ID associated with the storage processing unit, querying another device of the storage network for the ID information or receiving the ID information.
6. The method of claim 1 wherein the integrity information is generated based on at least one of obtaining a certificate, generating a signature of the certificate, or calculating a hash of the audit object.
7. The method of claim 1 wherein facilitating storage of the audit object and the name of the audit object includes at least one of: sending the audit object and the name of the audit object to the storage network for storage or storing the audit object and the name of the audit object in the storage network.
8. A processing system of a storage processing unit comprises:
at least one processor;
a memory that stores operational instructions, that when executed by the at least one processor cause the processing system to:
obtain audit records for an audit object, each of the audit records corresponding to an audit message, each of the audit records identifying a storage network entity and each of the audit records including a time and date, and a type code selected from a plurality of type codes, wherein the plurality of type codes include a storage access event type code and an authentication audit event type code;
generating the audit object to include the audit records, system ID information, and integrity information; and
facilitate storage of the audit object in a storage network utilizing a corresponding name of the audit object.
9. The processing system of claim 8 wherein the name of the audit object is determined based on a virtual storage network address associated with accessing the audit object when stored as a plurality of audit object slices in the storage network.
10. The processing system of claim 8 wherein the name of the audit object includes at least one of: a text string name or a sequence number.
11. The processing system of claim 8 wherein the name of the audit object includes at least one of: a timestamp when created or a timestamp associated with when the audit object may be deleted.
12. The processing system of claim 8 wherein the integrity information is generated based on at least one of: utilizing an ID associated with the storage processing unit, querying another device of the storage network for the ID information or receiving the ID information.
13. The processing system of claim 8 wherein the integrity information is generated based on at least one of obtaining a certificate, generating a signature of the certificate, or calculating a hash of the audit object.
14. The processing system of claim 8 wherein facilitating storage of the audit object and the name of the audit object includes at least one of: sending the audit object and the name of the audit object to the storage network for storage or storing the audit object and the name of the audit object in the storage network.
15. A non-transitory computer readable storage medium comprises:
at least one memory section that stores operational instructions that, when executed by a processing system of a storage network that includes a processor and a memory, causes the processing system to:
obtain audit records for an audit object, each of the audit records corresponding to an audit message, each of the audit records identifying a storage network entity and each of the audit records including a time and date, and a type code selected from a plurality of type codes, wherein the plurality of type codes include a storage access event type code and an authentication audit event type code;
generating the audit object to include the audit records, system ID information, and integrity information; and
facilitate storage of the audit object in a storage network utilizing a corresponding name of the audit object.
16. The processing system of claim 15 wherein the name of the audit object is determined based on a virtual storage network address associated with accessing the audit object when stored as a plurality of audit object slices in the storage network.
17. The processing system of claim 15 wherein the name of the audit object includes at least one of: a text string name or a sequence number.
18. The processing system of claim 15 wherein the name of the audit object includes at least one of: a timestamp when created or a timestamp associated with when the audit object may be deleted.
19. The processing system of claim 15 wherein the integrity information is generated based on at least one of: utilizing an ID associated with a storage processing unit, querying another device of the storage network for the ID information or receiving the ID information.
20. The processing system of claim 15 wherein the integrity information is generated based on at least one of obtaining a certificate, generating a signature of the certificate, or calculating a hash of the audit object.