Audit log filter, increasing the limit of events

I am faced with the fact that the number of events per day can exceed 9999.

  1. Can I increase this limit?
    I see In Teleport UI this message:

Number of events retrieved for specified date range has exceeded the maximum limit of 9999 events

  1. Is it possible to disable the logs for the following messages?

Usage report has been updated for session
started port forwarding


Not currently. We’re tracking a request for similar functionality in this issue: Add pagination support to Audit Events Search API · Issue #5388 · gravitational/teleport · GitHub

Not currently. You could potentially look at modifying the Teleport code to not emit those specific events if you wanted. If you’d like to see this functionality implemented then please raise a feature request on Github!

1 Like