Skip to content

Exclude SPP audit events from certain tiers

Problem to solve

We currently emit a number of audit events anytime someone configures SPP. We need to make sure these audit events are only emitted in accordance with the expectations set by the overall feature, Category:Audit Events.

Proposal

Based on the guidance in this thread (internal only - 90 days), here's what our proposed solution looks like:

Current tier capabilities for Audit Events:

  • Free: Sign-in events only
  • Premium: Free features + audit event reports (project/group level) + API access
  • Ultimate: Premium features + third-party streaming capabilities

Recommendation for SPP events: Based on our tiering strategy, SPP audit events should be excluded from Free tier and available only for Premium and Ultimate tiers.

Implementation plan

Implementation considerations:

  • You can configure audit event storage vs. streaming only based on anticipated volume of audit events (see this doc page for all audit event types we capture at the moment and whether they are saved in the database or streaming only).
  • Audit event capture should be done in EE.

TBD

Edited by 🤖 GitLab Bot 🤖