Logging, Metrics & Compliance Audit
Structured AAA logging and Prometheus metrics across every container.
- Every service logs Authentication, Authorization, and Audit (AAA) events in a consistent structured format, to stdout/stderr, rotated local files, and optional syslog.
- Suggested retention: 2 years for AUTH/AUTHZ security logs (immutable storage recommended), 7 years for audit logs in compliance-sensitive deployments, 90 days for system logs.
- Sensitive fields (passwords, tokens, API keys, secrets) are redacted before any log line is written.
- Every service exposes Prometheus-format metrics at /metrics; example Alertmanager rules ship for authentication-failure spikes and database connectivity loss.