kafka-audit-producer/event-filters

The hostname or IP address of the Kafka broker

Specifies the event filters that determine which DRP events will be captured and sent to Kafka.

This parameter configures the filtering criteria for events. You can use multiple filter patterns to capture different types of events. Each filter should follow the DRP filter syntax pattern: type.action.key[.filter_expression]

Examples: - audit_entries.create.* - Capture all new audit entries - machines.*.* - Capture all machine events - jobs.create.* - Capture job creation events - *.*.*.And(event.Principal=Re(^user:)) - Capture all events from users

By default, the plugin captures audit_entries events from the auditor plugin.