What does the audit log do

  • 1st I have absolutely no idea what this audit log is used for and what happens after clicking "Audit".
  • 2nd I did so and the domain wasn´t put in /etc/pihole/auditlog.list cause I think meanwhile there was a change in Pi-hole for using some kind of database instead of those files, right?

So: where did the "audited" domain go?

  1. The audit log shows all domains that have not been audited. You can audit each domain in the sense of "I'm aware of this domains and it should not show up in this list again". This is helpful to detect "new" domains that pop up in your logs.

  2. It goes to the sqlite database /etc/pihole/gravity.db in the table domain_audit

1 Like

Is there a way to view or delete these in the admin page? What if someone miss clicked? Asking for a friend =].

It's not possible form the web interface but from command line.

nanopi@nanopi:~$ sqlite3 /etc/pihole/gravity.db -header -column "Select * from domain_audit;"
id          domain         date_added
----------  -------------  ----------
1           ping.ubnt.com  1602996377

nanopi@nanopi:~$ sudo sqlite3 /etc/pihole/gravity.db "Delete from domain_audit where id =1;"

nanopi@nanopi:~$ sqlite3 /etc/pihole/gravity.db -header -column "Select * from domain_audit;"

5 Likes

Hi there! Thanks for your info on managing the list of audited domains.
It seems that the Pi-hole web interface only filters-out audited domains in the "Audit log" page, which is limited to 10 permitted and 10 blocked domains.
Would it be possible have an option to ignore (filter-out) audited domains in other pages, especially in the Query Log page and also in the Dashboard list of Top 10 Permitted domains?
My objective is to identify more easily the permitted domains that I may wish to block if I find them to be unnecessary.
Thanks in advance for your advice!

Use Settings ->Api/Webinterface -> Top Domains

Please vote here: Option to ignore domains from appearing in the Query Log

1 Like

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.