I need some understanding regarding the 2 audit cluster-wide properties : audit.detailThreshold and audit.messageThrehold.
Below snippet of definitions taken from help center are not clear to me
audit.detailThreshold : Minimum level for an audit detail message to be saved to the database.
audit.messageThreshold : Minimum level for a message at the end of processing before it is saved to the database.
I have observed below cases by altering the values of both the properties.
INFO and WARNING both are logged
Only WARNING Messages are logged
Can someone please clarify what is the difference between both the properties and in which scenario we should use them? Any use-case supporting the same? What differences will be observed in log files if we alter the values of these properties?
Audit messages are the main audits representing a transaction, such as "Message Processed Successfully". The following screenshot shows the audit messages as seen in the Gateway Audit Event Viewer:
Audit details are the associated logs that correspond to a single transaction, such as the information generated by the "Add Audit Detail" assertion. The following screenshot shows the audit details as seen in the Gateway Audit Event Viewer:
The cluster-properties set the thresholds for these audit types accordingly. So audit.messageThreshold will set the threshold of the audit messages from the first screenshot, and audit.detailThreshold will set the threshold of the audit details from the second screenshot.