Recording of RPC audit data

In this section, you will learn how the node records Remote Procedure Call (RPC) audit data.

This feature is distributed as part of Corda Enterprise.

RPC actions play a vital part in the process of triggering commands and flows on a node. In a variety of cases you will need to track the usage of RPC actions - for example, when there are security and regulatory concerns. To do so, you can use the Corda Enterprise node’s capability to record audit information about RPC actions as they are received, prior to executing each action.

The data recorded by the node is listed below:

  • username - the specific user who executed the action (limited to 130 characters).
  • interface - the specific type of RPC on which the action was called (limited to 130 characters).
  • action - the action that the user intended to invoke (limited to 130 characters).
  • parameters - for non-flow actions, the parameter list which was passed with the action (limited to 255 characters).
  • invocationtime - the time when the action was recorded by the node and invoked.
  • invocationid - the unique invocation id of the action.
  • allowed - a boolean field indicating if the user was allowed to call the action.

To enable collection of RPC actions, we have provided a configuration option in the enterpriseConfiguration.auditService section of the node.conf file, as follows:

enterpriseConfiguration = {
    ...

    auditService = {
        eventsToRecord = NONE
    }

    ...
}

The current AuditService configuration supports the following audit types:

  • NONE - nothing will be recorded (default)
  • RPC - RPC actions will be recorded
  • ALL - all audit services will be recorded (note that only RPC is supported at this time)

In addition to recording RPC Audit Data it will also be useful to collect information on any data recorded. See the RPC Audit Data Collector page for details on this.

Was this page helpful?

Thanks for your feedback!

Chat with us

Chat with us on our #docs channel on slack. You can also join a lot of other slack channels there and have access to 1-on-1 communication with members of the R3 team and the online community.

Propose documentation improvements directly

Help us to improve the docs by contributing directly. It's simple - just fork this repository and raise a PR of your own - R3's Technical Writers will review it and apply the relevant suggestions.

We're sorry this page wasn't helpful. Let us know how we can make it better!

Chat with us

Chat with us on our #docs channel on slack. You can also join a lot of other slack channels there and have access to 1-on-1 communication with members of the R3 team and the online community.

Create an issue

Create a new GitHub issue in this repository - submit technical feedback, draw attention to a potential documentation bug, or share ideas for improvement and general feedback.

Propose documentation improvements directly

Help us to improve the docs by contributing directly. It's simple - just fork this repository and raise a PR of your own - R3's Technical Writers will review it and apply the relevant suggestions.