Description
The audit log (/api/v1/audit/events) returns timestamps as Unix epoch integers (e.g., 1719856234). This is inconvenient for human readers and requires conversion to be useful in reports or SIEM integration.
Expected Behavior
Timestamps should be ISO-8601 formatted (e.g., 2024-07-01T18:30:34Z) by default, with an option to return epoch if needed. This aligns with common security tooling conventions (Splunk, ELK, SIEM systems all prefer ISO-8601).
Affected Files
api_server/src/audit.rs (timestamp formatting)
Description
The audit log (
/api/v1/audit/events) returns timestamps as Unix epoch integers (e.g.,1719856234). This is inconvenient for human readers and requires conversion to be useful in reports or SIEM integration.Expected Behavior
Timestamps should be ISO-8601 formatted (e.g.,
2024-07-01T18:30:34Z) by default, with an option to return epoch if needed. This aligns with common security tooling conventions (Splunk, ELK, SIEM systems all prefer ISO-8601).Affected Files
api_server/src/audit.rs(timestamp formatting)