Package auditd-plugin-clickhouse-lite: Information

  • Default inline alert: Version in the repository: 0.1.9-alt2

Source package: auditd-plugin-clickhouse-lite
Version: 0.1.9-alt1
Latest version according to Repology
Build time:  Feb 4, 2026, 03:49 AM in the task #407095
Category: Monitoring
Report package bug
License: GPLv3+
Summary: A lightweight plugin for auditd daemon to send audit data to a Clickhouse database
Description: 
A lightweight plugin for auditd daemon to send audit data to a Clickhouse
database.

List of RPM packages built from this SRPM:
auditd-plugin-clickhouse-lite (x86_64, i586, aarch64)
auditd-plugin-clickhouse-lite-debuginfo (x86_64, i586, aarch64)
clickhouse-audit-utils (noarch)

Maintainer: Paul Wolneykien

List of contributors:
Paul Wolneykien

ACL:
Paul Wolneykien
@everybody

    1. /proc
    2. gcc-c++
    3. pytest3
    4. python3-module-clickhouse_test >= 0.1.3
    5. bats
    6. python3(clickhouse_driver)
    7. rpm-macros-cmake
    8. boost-devel-headers
    9. clickhouse-client
    10. clickhouse-server
    11. cmake
    12. ctest
    13. libaudit-devel
    14. libclickhouse-cpp-devel

Last changed


Feb. 3, 2026 Paul Wolneykien 0.1.9-alt1
- Fix: Make clickhouse-audit-utils package noarch.
- Make auditd-plugin-clickhouse-lite support -V for version info.
- Fix: Output raw audit data in 'TabSeparatedRaw' format to prevent
  extra backslash escaping.
- Make clickhouse-audit-export use the new export scripts.
- Export raw audit records by subset of record IDs.
- Fixed build without dbtest.
- FIX: Filter by UID in all queries!
- Partition all the tables by start of month.
- Limit the process timeframe to 5 days.
- Added 'build_info(start_id=ID)' parametrized view.
- Added 'process_tree(start_id=ID)' parametrized view.
- Index 'process_parts' by PID.
- Minimize Boost dependencies.
- Don't use FINAL in queries: aggregate the data in-query.
- Fix: Do not count unsuccessful rpmbuild spawns.
- Divide views and tables onto three separated groups:
  1. the main AuditDataRaw table;
  2. the pstree tables and views;
  3. the rpmbuild tables and views.
- Refactor rpmbuild index: include target, package name and version
  and place into 'package_build_index' table.
April 4, 2024 Paul Wolneykien 0.1.8-alt2
- Disable database build test on arches where clickhouse-server is
  not available.
April 4, 2024 Paul Wolneykien 0.1.8-alt1
- Added test checking "build_test.log" is written and processed.
- Added test checking "test.log" is written to AuditDataRaw table.
- Added tests that run against a real ClickHouse instance with
  the help of python3-module-clickhouse-test.
- Load init_db.sql statement-by-statement, i. e.: allow to place
  a multi-statement SQL script there.