How do I enable logging of successful authorizations in keystone?

Question

Can you tell me how to enable successful authorization events in keystone? I have studied the documentation, but it only says that these events are disabled by default. I tried specifying the notification = identity.authenticate.success parameter in the keystone.conf file, but it didn't give any result. I have enabled the cadf notification format to get an extended event view. I get user creation events, projects, etc. in the logs, but I don't get authorization events. Thank you in advance.

Answer 1

Set as below will enable identity.authenticate.*:

keystone.conf:

[DEFAULT]
notification_opt_out =
...

Then restart keystone service to apply your changes.