Event logs disappear from UI after restart

I’m using DynamoDB to store the cluster state and the event logs, and S3 to store the recorded sessions. So far it’s working fine, but whenever I restart the teleport instance, the event logs disappear from the web UI. They are still present in DynamoDB though. Is this the expected behavior? Here is my configuration:

      type: dynamodb
      region: us-east-1
      table_name: ${DYNAMODB_STATE_TABLE}
      audit_events_uri: ['file:///var/lib/teleport/log', 'dynamodb://${DYNAMODB_EVENTS_TABLE}']
      audit_sessions_uri: "s3://${S3_SESSIONS_BUCKET}/sessions"

@kenske Your HA events storage should be listed first in the audit_events_uri array. The first position will be where the UI sources data for display.

audit_events_uri: ['dynamodb://${DYNAMODB_EVENTS_TABLE}', 'file:///var/lib/teleport/log']

Give that a shot and let me know if it resolves the issue.

1 Like

that was it! thanks :smiley: