Hello I have jupyterhub installed on k8s. If i look at the pods logs i see only [I 2023-09-26 10:18:53.530 SingleUserLabApp log:186] 200 GET /user/mcostach/api/terminals?1695723533496 (mcostach@10.193.12.43) 1.36ms [I 2023-09-26 10:18:53.848 SingleUserLabApp log:186] 200 GET /user/mcostach/api/metr…

The logs you posted are the logs from JupyterHub. So, if you look into the logs of the pods where single user servers are running, you will have more details on what users are doing with their servers.

Thank you for reply, those were in fact from the singleuser pod kubectl -n jupyter logs jupyter-mcostach | tail [I 2023-09-26 11:55:29.439 SingleUserLabApp kernelmanager:318] Starting buffering for 81daf51c-13d7-469a-a884-aeea2dfc231c:281d1c08-2f58-4b7a-83c9-76f19f7e03ab [I 2023-09-26 11:55:29.465 …

Yeah that’s what my security team wants …

I don’t know how to do it in Jupyter or Kubernetes, but at the operating system level there’s support for logging executed commands and arguments: [Stephen Harris] Is there an easy way to log all commands executed, including command line arguments? logs, proc, arguments, a…

I gave this a try, and the logging works fine if you run commands in the bash shell: docker run -it jupyterhub/singleuser /bin/bash But it doesn’t log anything from the jupyter terminal. There must be something else to log instead of execve?

As @manics says, you will need to do this at the operating system level, rather than at the Jupyter level. Even if Jupyter Server (or similar) logged it, it would not be suitable for auditing purposes, as the end user may as well modify the code inside to emit false info or redact info. Doing it at …

Sorry to not be clear – I added auditctl to my jupyter docker image. It logs commands just fine if I start the container with docker run. But when I use Jupyterhub (swarm spawner) to start the container, or if I use docker service create to start the container, then there is no logging of commands.…

Have you tried configuring auditd on the host operating system, and looking at the host audit logs?

Yes, that works – but it doesn’t give any information on which container the command came from (as far as I can tell). I thought that if I could have each container logging the commands, then I could know who did what. It’s just weird that I get different behavior from running the container vs sta…

Audit user activity

JupyterHub

mahendrapaipuri September 26, 2023, 1:02pm 4

Fair enough, you are right! So, if you need more verbose logs, you can enable debug logging. I dont think you can log what commands were executed from kernel or terminal.

Topic		Replies	Views
Logging in jupyterhub Zero to JupyterHub on Kubernetes community , jupyterhub , how-to , help-wanted , notebook	1	126	November 12, 2024
Implementing Audit Logging? JupyterHub	2	449	March 27, 2024
Auditing in jupyterhub JupyterHub	5	1080	May 8, 2024
How to collect a user login history log Zero to JupyterHub on Kubernetes	2	443	March 25, 2024
Configure JupyterHub to logging code execution JupyterHub how-to	1	393	May 30, 2023

Audit user activity

Related topics