Security audit logging in Jenkins - Mini Project: Build & Apply

Security Audit Logging in Jenkins

📖 Scenario: You are a Jenkins administrator responsible for improving security by enabling audit logging. Audit logs help track who did what and when in Jenkins, which is important for security and compliance.

🎯 Goal: Enable and configure security audit logging in Jenkins to record user actions and system events.

📋 What You'll Learn

Create a Jenkins pipeline script with audit logging configuration

Add a variable to hold the audit log file path

Configure the audit logging plugin with the log file path

Print the audit log file path to confirm configuration

💡 Why This Matters

🌍 Real World

Audit logging in Jenkins helps track user actions and system changes, which is important for security audits and compliance in real companies.

💼 Career

Knowing how to configure audit logging in Jenkins is useful for DevOps engineers and system administrators to maintain secure and compliant CI/CD pipelines.

1

Create Jenkins pipeline script skeleton

Create a Jenkins pipeline script with a pipeline block and an empty stages section.

Jenkins

pipeline {
    agent any
    stages {
        // Your code here
    }
}

Need a hint?

Start with the basic Jenkins pipeline structure including pipeline, agent any, and an empty stages block.

2

Add audit log file path variable

Inside the pipeline block but before stages, add an environment variable called AUDIT_LOG_PATH with the value "/var/log/jenkins/audit.log".

Jenkins

pipeline {
    agent any
    environment {
        // Your code here
    }
    stages {
    }
}

Need a hint?

Use the environment block to define the AUDIT_LOG_PATH variable with the exact path string.

3

Configure audit logging plugin

Add a stage named Configure Audit Logging inside stages. In its steps, add a shell command that echoes Audit log path is $AUDIT_LOG_PATH and a comment line showing where audit logging configuration would be added.

Jenkins

pipeline {
    agent any
    environment {
        AUDIT_LOG_PATH = "/var/log/jenkins/audit.log"
    }
    stages {
        // Your code here
    }
}

Need a hint?

Create a stage with the exact name and add a shell step that prints the audit log path using the environment variable.

4

Print audit log path to confirm

Add a final stage named Print Audit Log Path with a steps block that runs a shell command to print the value of $AUDIT_LOG_PATH.

Jenkins

pipeline {
    agent any
    environment {
        AUDIT_LOG_PATH = "/var/log/jenkins/audit.log"
    }
    stages {
        stage('Configure Audit Logging') {
            steps {
                sh 'echo Audit log path is $AUDIT_LOG_PATH'
                // Audit logging plugin configuration would be added here
            }
        }
        // Your code here
    }
}

Need a hint?

Use a shell command in the new stage to print the audit log path exactly as defined.