You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In Keycloak version 26.0.3, I want to have detailed logging events/recorded in the "Admin events" for scenarios like the ones I'll describe below; I need a solution that provides detailed logging/eventing, specifying exactly what changes the Keycloak admin has made to the keycloak's configuration.
Scenario 1) When the Keycloak admin enables the brute force detection option in the desired realm, the event is logged in admin events as follows:
Resource type: REALM
Operation type: UPDATE
User: 7326206a-9f2f-44ca-a082-21b0cef81e4c
Time: June 4, 2025 at 3:01 PM
However, it doesn't specify the exact change made, such as indicating that it is a type of security defense action or something similar.
This kind of logging doesn't include specific details about the change itself (e.g., enabling brute force detection). It would be helpful to have a more granular log that mentions the action taken, such as enabling brute force detection or any other security configuration changes.
Scenario 2) The second scenario involves policies like changes to the password policy. Once you enter the Keycloak admin console and go to the Authentication section, you can apply a policy, such as setting the minimum number of characters for passwords. However, the event logged in Admin Events appears as follows:
Resource type: REALM
Operation type: UPDATE
User: 7326206a-9f2f-44ca-a082-21b0cef81e4c
Time: June 4, 2025 at 3:06 PM
Again, this event does not specify exactly what change was made (e.g., setting a minimum password length). It would be more useful if the event log included details about the password policy change, such as "Password policy updated: minimum length set to X characters."
Can you guide me on how to display and manage such data in Keycloak? ;)
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
In Keycloak version 26.0.3, I want to have detailed logging events/recorded in the "Admin events" for scenarios like the ones I'll describe below; I need a solution that provides detailed logging/eventing, specifying exactly what changes the Keycloak admin has made to the keycloak's configuration.
Scenario 1) When the Keycloak admin enables the brute force detection option in the desired realm, the event is logged in admin events as follows:
Resource type: REALM
Operation type: UPDATE
User: 7326206a-9f2f-44ca-a082-21b0cef81e4c
Time: June 4, 2025 at 3:01 PM
However, it doesn't specify the exact change made, such as indicating that it is a type of security defense action or something similar.
This kind of logging doesn't include specific details about the change itself (e.g., enabling brute force detection). It would be helpful to have a more granular log that mentions the action taken, such as enabling brute force detection or any other security configuration changes.
Scenario 2) The second scenario involves policies like changes to the password policy. Once you enter the Keycloak admin console and go to the Authentication section, you can apply a policy, such as setting the minimum number of characters for passwords. However, the event logged in Admin Events appears as follows:
Resource type: REALM
Operation type: UPDATE
User: 7326206a-9f2f-44ca-a082-21b0cef81e4c
Time: June 4, 2025 at 3:06 PM
Again, this event does not specify exactly what change was made (e.g., setting a minimum password length). It would be more useful if the event log included details about the password policy change, such as "Password policy updated: minimum length set to X characters."
Can you guide me on how to display and manage such data in Keycloak? ;)
Thank you in advance, Iman!
All reactions