As of Vault versions: 1.12.0 , 1.11.1 and 1.10.5 (OSS and Ent), a change was introduced where you can change the log level verbosity without having to restart your vault node.
The two endpoints that have been introduced are sys/loggers
(all loggers) and sys/loggers/:name
(an individual logger, e.g.core
). Each supports a POST
and DELETE
to modify and revert back to Vault configuration, respectively.
Modify verbosity level of all loggers
The/sys/loggers
endpoint is used modify the verbosity level of logging.
Method | Path |
---|---|
POST |
/sys/loggers |
Parameters
level
(string: <required>)
– Specifies the log verbosity level to be set for all loggers. Supported values (in order of detail) are"trace"
,"debug"
,"info"
,"warn"
, and"error"
.
Sample Payload
Sample Request
------------------------------------------------------------------------------------------------------
Modify verbosity level of a single logger
Method | Path |
---|---|
POST |
/sys/loggers/:name |
Parameters
name
(string: <required>)
– Specifies the logger to be modified (e.g.audit
,core
,expiration
).level
(string: <required>)
– Specifies the log verbosity level to be set for the provided logger. Supported values (in order of detail) are"trace"
,"debug"
,"info"
,"warn"
, and"error"
.
Sample Payload
Sample Request
------------------------------------------------------------------------------------------------------
Revert verbosity of all loggers to configured level
Method | Path |
---|---|
DELETE |
/sys/loggers |
Sample Request
Revert verbosity of a single logger to configured level
Method | Path |
---|---|
DELETE |
/sys/loggers/:name |
Parameters
name
(string: <required>)
– Specifies the logger to be modified (e.g.audit
,core
,expiration
).
Sample Request
Resources:
- https://developer.hashicorp.com/vault/tutorials/monitoring/troubleshooting-vault#changing-the-log-level
- https://github.com/hashicorp/vault/pull/16111
- https://developer.hashicorp.com/vault/api-docs/system/loggers
- https://developer.hashicorp.com/vault/tutorials/monitoring/troubleshooting-vault#vault-server-logs