When saving after the operation, it takes more than ten seconds or even longer to wait, I guess that as the audit increases, the time for writing new logs becomes longer.
Besides this, I also found that if I enabled the [–audit] option, the memory usage was much higher. File synchronization also takes longer.
So I suggest improving the storage mechanism of Audit information. The specific suggestions are as follows:
-
Add a new audit file every hour, as shown in the above figure. In this way, the size of each file is controllable, the write efficiency will be improved, and the memory usage will be reduced.
-
It supports users to configure the saving duration of audit files, with a default of 6 months. After the expiration, the expired audit files will be automatically cleared.
If this mechanism can be implemented, the Audit function will be very complete, which will greatly enhance the system performance and user experience. I hope you can fully consider my suggestions. Thank you.