Package auditd-plugin-clickhouse-lite: Information

    Source package: auditd-plugin-clickhouse-lite
    Version: 0.1.9-alt3
    Build time:  Mar 25, 2026, 12:59 PM
    Category: Monitoring
    Report package bug
    License: GPLv3+
    Summary: A lightweight plugin for auditd daemon to send audit data to a Clickhouse database
    Description: 
    A lightweight plugin for auditd daemon to send audit data to a Clickhouse
    database.

    List of RPM packages built from this SRPM:
    auditd-plugin-clickhouse-lite (loongarch64)
    auditd-plugin-clickhouse-lite-debuginfo (loongarch64)
    clickhouse-audit-utils (noarch)

    Maintainer: Ilya Kurdyukov

    List of contributors:
    Ilya Kurdyukov
    Paul Wolneykien

      1. /proc
      2. libaudit-devel
      3. bats
      4. boost-devel-headers
      5. clickhouse-client
      6. clickhouse-server
      7. cmake
      8. python3-module-clickhouse_test >= 0.1.3
      9. ctest
      10. libclickhouse-cpp-devel
      11. rpm-macros-cmake
      12. pytest3
      13. python3(clickhouse_driver)
      14. gcc-c++

    Last changed


    Feb. 13, 2026 Ilya Kurdyukov 0.1.9-alt3
    - e2k build fix
    Feb. 3, 2026 Paul Wolneykien 0.1.9-alt2
    - Fix: Own /usr/libexec/clickhouse-audit-export.
    Feb. 3, 2026 Paul Wolneykien 0.1.9-alt1
    - Fix: Make clickhouse-audit-utils package noarch.
    - Make auditd-plugin-clickhouse-lite support -V for version info.
    - Fix: Output raw audit data in 'TabSeparatedRaw' format to prevent
      extra backslash escaping.
    - Make clickhouse-audit-export use the new export scripts.
    - Export raw audit records by subset of record IDs.
    - Fixed build without dbtest.
    - FIX: Filter by UID in all queries!
    - Partition all the tables by start of month.
    - Limit the process timeframe to 5 days.
    - Added 'build_info(start_id=ID)' parametrized view.
    - Added 'process_tree(start_id=ID)' parametrized view.
    - Index 'process_parts' by PID.
    - Minimize Boost dependencies.
    - Don't use FINAL in queries: aggregate the data in-query.
    - Fix: Do not count unsuccessful rpmbuild spawns.
    - Divide views and tables onto three separated groups:
      1. the main AuditDataRaw table;
      2. the pstree tables and views;
      3. the rpmbuild tables and views.
    - Refactor rpmbuild index: include target, package name and version
      and place into 'package_build_index' table.