byerlikaya/septum-audit
Septum compliance audit log — JSONL sink + JSON / CSV / Splunk HEC exporters. No raw PII.
1.0K
byerlikaya/septum-audit repository overview
Septum Audit — compliance log + SIEM exporters (internet-facing zone)
Append-only JSONL audit sink with JSON / CSV / Splunk HEC exporters. Consumes audit events from septum-queue and writes them to durable storage with retention policies.
Security invariant. The image does not contain septum-core and cannot import it — audit events carry only entity types, counts, regulation ids, and timestamps; never raw PII.
Pair with septum-gateway for the internet-facing zone, or run against the all-in-one septum image for audit-only deployments.
Quick start
docker compose -f docker-compose.gateway.yml up
Brings up the audit worker + audit HTTP API + the gateway pair + Redis. Retention window, sink paths, and SIEM endpoints configured via env.
Two containers from the same image
| Command | Role |
|---|---|
python -m septum_audit | Stdio worker — consumes audit events from the queue, writes JSONL + applies retention |
uvicorn septum_audit.main:create_app --factory | HTTP server — /health + /api/audit/export (JSON / CSV / Splunk HEC) |
Tags
| Tag | Contents |
|---|---|
latest, 1, 1.0, 1.0.0 | Multi-arch (amd64 + arm64), ~100 MB |
Links
- Source: github.com/byerlikaya/Septum
- Architecture: docs/ARCHITECTURE.md
- Audit & compliance: docs/ARCHITECTURE.md#audit-trail--compliance-reporting
Tag summary
Content type
Image
Digest
sha256:ce4f9e4ce…
Size
50.8 MB
Last updated
3 months ago
docker pull byerlikaya/septum-audit